18 rules in 5 groups, worth 100 points in all. They were set before any product was scored and apply the same way to all 9.
Version 1, published 8 Oct 2026
In short
Each rule is a yes-or-no fact, a list (such as the systems with an app) or a number with published thresholds, read from the vendor's own pages.
A fact the vendor does not publish earns nothing. A feature in beta or preview does not count.
The list follows the points. A tie goes to the lower price on "price on a one-year plan", then to the name.
Consumer VPN services with a Windows app. Business VPNs and self-hosted VPN software are left out.
Privacy and audits 35 points
Rule
What it takes
Points
No-logs audit since 2024
A named outside firm audited the no-logs policy or the server setup, and the vendor publishes the report or a summary dated 2024 or later.
10
App security audit since 2024
A named outside firm audited or penetration-tested the VPN apps, with a report or summary dated 2024 or later.
5
RAM-only servers
The vendor says every VPN server runs from memory (RAM), with no hard drive that keeps data after a restart.
5
Open-source apps
The source code of the apps is public under an open-source licence.
5
Anonymous sign-up
You can create an account without an email address, or pay with cash or Monero.
5
Transparency report
The vendor publishes a transparency report or a warrant canary, updated within the last 12 months.
5
Security features 20 points
Rule
What it takes
Points
WireGuard
WireGuard, or a protocol the vendor says is built on WireGuard, is available in the Windows app.
5
Kill switch
The Windows app can block all internet traffic if the VPN connection drops.
5
Post-quantum encryption
The vendor documents post-quantum key exchange in its apps.
5
Multi-hop
You can route traffic through two VPN servers in a row (multi-hop, double VPN or similar).
5
Apps 15 points
Rule
What it takes
Points
Apps
An official app or command-line client for each system. Each one earns 2 points.
10
Browser extensions
An official extension for each browser. Each one earns 1 point.
3
Router setup
The vendor documents how to run the VPN on a home router.
2
Everyday use 10 points
Rule
What it takes
Points
Devices at once
Devices connected at the same time on one paid plan; unlimited counts as 999. 10 or more earns 5 points, 8 or more 3, 5 or more 1.
5
Split tunnelling
The Windows app lets you choose apps or sites that bypass the VPN.
5
Price 20 points
Rule
What it takes
Points
Free plan with no data cap
A free plan (not a trial) with no monthly data limit.
5
Price on a one-year plan
The cheapest plan's monthly cost when you buy its one-year term up front, first term, in US dollars: the price paid divided by the months you get, bonus months included. Without a one-year term, the month-to-month price. $3 or less earns 8 points, $4 or less 6, $5 or less 4, $6 or less 2.
8
Same price on renewal
That plan renews at the price you first paid, with no introductory discount that ends.