Our Review Methodology

Why Methodology Matters

VPN reviews vary wildly in depth and independence. Some rely on vendor-provided information; others perform brief tests that don't reflect real-world use. We publish our methodology so you can judge the quality of our findings for yourself.

We also follow guidance from the Electronic Frontier Foundation on what a trustworthy VPN should be able to claim — including audited policies and transparent ownership structures.

1. Speed Testing

We run speed tests from a dedicated test machine with a 500 Mbps symmetrical fiber connection. Tests are conducted at three different times of day (morning, afternoon, evening) to account for server load variations. We record:

• Download and upload speeds in Mbps
• Latency (ping) in milliseconds
• Speed retention as a percentage of baseline

Each protocol is tested independently on the same server. We test at least 5 server locations per review: a nearby server, two distant servers in different continents, a streaming-optimized server if available, and an obfuscated server if available.

2. Security & Privacy Testing

Security testing covers:

• DNS leak tests via dnsleaktest.com — standard and extended test
• IPv6 leak tests — whether IPv6 traffic is tunneled or exposed
• WebRTC leak tests — particularly important for browser-based VPN use
• Kill switch verification — we simulate connection drops using network adapter disabling and check for traffic leakage via Wireshark

We also review audit reports published by independent security firms. We do not conduct our own cryptographic audits but assess whether audits are comprehensive, recent (within 3 years), and published by recognized firms.

3. Privacy Policy Review

We read the full privacy policy and terms of service for each service. Key questions:

• What data, if any, is collected at connection time?
• What data is shared with third parties?
• Has the no-logs policy been independently verified?
• Has the policy been tested in a real legal scenario (e.g., government data request)?

4. Platform & Usability Testing

We install and test on at minimum: Windows 10/11, Android 13+, and iOS 16+. We assess:

• Installation and account setup time
• UI clarity and navigation
• Feature availability per platform (some features are desktop-only)
• Battery impact on mobile (via 8-hour standby tests)
• Behavior during network changes (Wi-Fi → mobile data transitions)

5. Streaming Unblocking

We test streaming platform access with a standardized set of services: Netflix US, Netflix UK, BBC iPlayer, Disney+, Amazon Prime Video, Hulu, and HBO Max. Tests are conducted from a European IP address using each VPN's recommended server for each service.

6. Transparency & Ownership

We research and disclose the corporate ownership structure of every VPN we review. We believe users have a right to know who operates the service they trust with their traffic. We flag cases where a parent company owns multiple competing VPN brands or has a history that may be relevant to trust decisions.

Our Independence

This site earns affiliate commissions when readers purchase a VPN through our links. This does not influence our scoring or editorial content. We apply the same testing methodology regardless of whether an affiliate arrangement exists. Services that score poorly are reviewed honestly — our long-term credibility depends on this.