IVPN
IVPN is a privacy-focused VPN service operated by IVPN Limited, based in Gibraltar. Founded in 2009, it offers anonymous account creation (no email required), accepts cryptocurrency and cash payments, publishes all apps as open source, and undergoes annual independent security audits by Cure53. IVPN operates self-hosted servers across 40 countries.
Score generated by AI agents based on publicly cited evidence and reviewed by the project maintainer. Not independently validated.
Score History
Timeline events are AI-curated from public reporting. Score trajectory is derived from documented events.
IVPN launches as a privacy-focused VPN service operated from Gibraltar by security professionals from Royal Holloway. The service uses standard OpenVPN protocols and operates a small self-hosted server network. As a new entrant, the product is basic but aligned with privacy principles from inception, with minimal commercial infrastructure and no known ethical concerns.
IVPN closes its affiliate program after finding less than 5% compliance with disclosure requirements, taking a principled stand against the VPN industry's deceptive marketing ecosystem. The company begins regular donations to privacy organizations including the EFF (member since 2013) and Open Rights Group (sponsor since 2016). The service grows slowly but maintains its self-hosted infrastructure and subscription-only model.
IVPN undergoes a rapid transparency expansion: the first Cure53 no-logging audit verifies all privacy claims, WireGuard protocol support launches with automated key management, AntiTracker ad blocking debuts, and IVPN participates in the CDT Signals of Trustworthy VPNs initiative. The company declares itself a Tracking Free provider, removing all third-party trackers from its website. New Standard/Pro subscription tiers launch with existing users upgraded for free.
IVPN open-sources all client applications under GPLv3, then the entire website. The email requirement for signup is eliminated in favor of anonymous Account IDs. A comprehensive Cure53 infrastructure audit is completed. The company publishes 'Why you don't need a VPN,' actively discouraging unnecessary purchases. Redesigned apps launch across all five platforms including the first native Linux GUI client. Despite growing features, the small server network remains a known limitation.
IVPN establishes a routine of annual Cure53 audits, adds Monero payments, launches SOCKS5 proxies and DNS over HTTPS support, and distributes free subscriptions during the Ukraine invasion. Port forwarding is removed due to abuse concerns, and the iOS kill switch is pulled after discovering an Apple IP leak. The company renames from Privatus Limited to IVPN Limited. These feature removals represent honest security trade-offs rather than degradation, but they do reduce the service's capabilities for power users.
IVPN acquires Safing to expand into DNS filtering and firewall capabilities, launches the audited Mailx email aliasing service, rolls out V2Ray censorship obfuscation across all platforms, and adds four new server locations. RAM-only server deployment begins. The company maintains its position as one of the most transparent and ethical VPN providers, recommended by Privacy Guides and the Freedom of the Press Foundation.
Alternatives
Similarly privacy-focused VPN with anonymous account creation and flat-rate pricing (5 EUR/month). Larger server network (700+ servers in 49 countries). Uses RAM-only servers for stronger security. Easy switch — just sign up and install. Slightly cheaper than IVPN with comparable privacy standards.
Swiss-based VPN with a free tier, strong no-logs policy, and integration with the Proton ecosystem (ProtonMail, Proton Drive). More servers and better streaming support than IVPN. Requires email for signup, so less anonymous. Easy switch — broad platform support including smart TVs.
Dimensional Breakdown
Summaries below were written by AI agents based on the cited evidence. They are editorial interpretations, not independent research findings.
Dimension History
Timeline (41 events)
IVPN VPN service launches from Gibraltar
Nicholas Pestell, a security professional with experience at Royal Bank of Scotland and Network Rail, founds IVPN (originally operated by Privatus Limited) in Gibraltar. The company is born from the Information Security Group at Royal Holloway, University of London, with a mission to protect digital privacy through VPN technology.
IVPN becomes EFF organization member
IVPN joins the Electronic Frontier Foundation as an organization member, beginning a long-running commitment to supporting privacy advocacy through financial donations. This comes the same year as the Snowden NSA revelations, which massively increased public demand for VPN services.
IVPN begins sponsoring Torservers.net relay
IVPN starts sponsoring a high-bandwidth Tor relay through Torservers.net, contributing to the Tor network's infrastructure. This marks an expansion of privacy advocacy beyond IVPN's own product into broader internet freedom tools.
IVPN publishes Gibraltar jurisdiction defense
IVPN publishes a detailed blog post arguing that Gibraltar should not be classified as a Five Eyes member, noting that UK surveillance legislation such as RIPA does not apply to Gibraltar. The post establishes IVPN's proactive approach to jurisdiction transparency, addressing a common concern among privacy-conscious users.
IVPN becomes Open Rights Group corporate sponsor
IVPN joins the UK's Open Rights Group as a corporate sponsor, expanding its support for digital rights organizations beyond the EFF to include UK-focused privacy advocacy.
IVPN closes affiliate program over industry ethics
IVPN shuts down its affiliate marketing program after an audit reveals less than 5% of affiliates comply with FTC disclosure requirements. The company cites widespread voucher code scams, undisclosed paid rankings, and notes that people using VPNs in life-threatening circumstances deserve honest recommendations, not revenue-optimized ones.
IVPN begins supporting WireGuard project financially
IVPN starts financially supporting the WireGuard open-source VPN protocol project before implementing it in their own service, demonstrating investment in open standards that benefit the broader VPN ecosystem.
IVPN launches fully automated WireGuard integration
IVPN introduces WireGuard protocol support across Android, iOS, and macOS apps with fully automated key management and IP assignment. While other VPN providers require manual configuration for WireGuard, IVPN's implementation handles key generation and distribution automatically, making the faster protocol accessible to all users.
IVPN declares itself a Tracking Free provider
IVPN removes all third-party trackers from its website, stops advertising on Facebook and Google, and drops all programmatic advertising. An analysis shows 18 of the top 20 VPN firms advertise on Facebook or Google and have at least one third-party tracker on their site. IVPN eliminates Adobe Typekit and Unbounce from its website.
Cure53 verifies IVPN no-logging claims in first audit
Cure53 conducts a 7-day independent audit of IVPN's no-logging claims, with 3 auditors given root SSH access to gateways and authentication servers. All of IVPN's privacy statements are verified as truthful. Only one low-impact issue is found involving temporary DNS caching, which IVPN immediately mitigates.
IVPN launches AntiTracker ad and tracker blocking
IVPN introduces AntiTracker, a DNS-based feature that blocks ads, trackers, and known malicious websites at the network level. The feature uses continuously updated blocklists and includes a Hardcore Mode that completely blocks all Google and Facebook/Meta domains.
WireGuard support extended to Windows platform
Following WireGuard's official Windows support, IVPN adds WireGuard protocol to its Windows app, completing cross-platform availability. The update also includes privacy improvements to WireGuard key management.
IVPN participates in CDT Signals of Trustworthy VPNs
IVPN joins Mullvad, TunnelBear, VyprVPN, and ExpressVPN in the Center for Democracy and Technology's Signals of Trustworthy VPNs initiative. The framework establishes eight transparency questions covering corporate accountability, logging practices, and security, with IVPN publishing full unedited answers.
IVPN donates to Tor Project, Fight for the Future, Access Now
IVPN expands its privacy advocacy support by donating to three additional organizations: the Tor Project, Fight for the Future (as a Rebel level sponsor), and Access Now. This brings the total number of supported organizations to six.
IVPN introduces Standard and Pro subscription tiers
IVPN launches two-tier pricing with IVPN Standard ($6/month, 2 devices) and IVPN Pro ($10/month, 7 devices). All existing subscribers are upgraded to Pro at no extra cost with device coverage improved from 5 to 7. The Pro plan includes multi-hop and port forwarding capabilities.
First comprehensive Cure53 infrastructure security audit
Cure53 completes a 21-man-day white-box security audit of IVPN's VPN infrastructure, internal backend servers, and web servers. The team of 6 finds 9 issues (3 high, 2 medium, 3 low, 1 info), all of which are resolved. IVPN commits to annual comprehensive audits going forward.
IVPN open-sources all client applications under GPLv3
IVPN releases the source code for all its VPN applications (Android, macOS, iOS, Windows) under the GPLv3 license. The move aims to improve transparency and build trust, making IVPN one of the few VPN providers with fully open-source clients. The company announces plans to eventually release server infrastructure code as well.
Beta IVPN Linux CLI app released
IVPN releases a beta Linux command-line interface app, expanding platform support beyond Windows, macOS, iOS, and Android. The app supports WireGuard, firewall, AntiTracker, and multi-hop features from the command line.
IVPN publishes 'Why you don't need a VPN' blog post
IVPN publishes a blog post actively discouraging unnecessary VPN purchases, explaining that many users don't need a commercial VPN and that the industry's scare-tactic marketing overstates threats. The post is unusual in the VPN industry as a provider advising against its own product when not needed.
Redesigned IVPN apps launch on iOS and Android
IVPN releases completely rebuilt iOS/iPadOS and Android apps with improved usability, an interactive server map, pull-up control panels for server selection and protocol switching, and better visual verification of connection status. The Android redesign follows on September 28.
IVPN Linux GUI app released
IVPN releases a full graphical user interface Linux app, tested on Ubuntu, Fedora, Debian, and Mint. The release completes IVPN's five-platform native app coverage using a unified desktop codebase for Linux, macOS, and Windows.
IVPN website goes open-source, removes email requirement
IVPN open-sources its entire website on GitHub and eliminates the email address requirement for account creation. Users now generate a unique Account ID with a single button press. Subscriptions switch from default auto-renewal to a prepaid system where users explicitly choose whether to enable recurring billing. Multi-year discount options (2-3 years) are introduced.
IVPN accepts Monero and runs own full node
IVPN begins accepting Monero cryptocurrency payments with a self-hosted wallet and full node, avoiding centralized payment processors. Monero's ring signatures and stealth addresses provide stronger payment anonymity than Bitcoin's transparent blockchain, further supporting anonymous subscription capabilities.
Second Cure53 audit covers apps on all five platforms
Cure53 completes an independent security audit of IVPN apps across all platforms (Windows, macOS, Linux, iOS, Android). Five security auditors find 4 vulnerabilities (2 critical, 2 medium) in the new unreleased desktop app, all immediately resolved. 10 miscellaneous issues are found, 8 resolved immediately.
IVPN launches DoINeedAVPN.com open-source tool
IVPN releases an open-source interactive tool at doineedavpn.com to help people evaluate whether they genuinely need a commercial VPN based on their threat model. The tool is designed to steer people away from VPN purchases when they don't need one, counter to standard VPN industry marketing incentives.
Redesigned desktop apps launch for macOS and Windows
IVPN releases rebuilt desktop apps for macOS and Windows with improved server discovery, more accessible settings, better visual verification of connection status, and QR-code-based setup. The apps use a single unified codebase shared with the Linux client.
IVPN publishes manifesto rejecting modern marketing
IVPN publishes 'Why we refuse modern marketing, even when it hurts our growth,' identifying nine marketing practices it rejects: surveillance-based targeting, dark patterns, unethical experimentation, misinformation, coercive incentives, misleading claims, fabricated social proof, low-value SEO content, and paid influencer endorsements.
IVPN distributes free subscriptions during Ukraine invasion
Four days after Russia invades Ukraine, IVPN announces free VPN subscriptions for anyone in Ukraine, Russia, and Belarus to circumvent censorship of communication channels. The company states that many Russians oppose the war and need access to uncensored information. A dedicated support page is launched on March 16.
DNS over HTTPS support added to desktop apps
IVPN introduces DNS over HTTPS (DoH) support on macOS, Linux, and Windows, allowing users to encrypt DNS queries using HTTPS within the VPN tunnel. Users can configure custom DNS servers that support DoH for an additional layer of DNS privacy.
Third Cure53 audit of IVPN apps concludes
Three senior Cure53 auditors complete a 13-day security assessment of IVPN apps across all platforms. The audit finds 12 miscellaneous issues, 9 already resolved and 3 deemed very low risk. The report confirms significant security improvements since the previous year's audit.
IVPN launches SOCKS5 proxy service on all servers
IVPN introduces a SOCKS5 proxy available on all servers, enabling users to route individual apps or browser tabs through different VPN exit locations than their main connection. Firefox users can configure different proxies per container tab, allowing simultaneous multi-country exit points.
Fifth Cure53 infrastructure audit finds minimal issues
Cure53 completes a 6-day white-box audit of IVPN's newly upgraded VPN gateway infrastructure, finding 3 security vulnerabilities and 5 miscellaneous issues (1 medium, 6 low, 1 info). All issues are remediated. The audit covers the new OS version deployed to VPN servers.
IVPN announces port forwarding removal for security
IVPN begins phasing out port forwarding from the Pro plan, citing abuse by bad actors sharing objectionable materials and increased law enforcement inquiries. New customers can no longer access the feature; existing reservations remain active until September 30, 2023, when all ports are disabled. The decision mirrors Mullvad's earlier similar move.
IVPN removes iOS kill switch due to Apple IP leak
IVPN removes the kill switch feature from its iOS app for iOS 16+ devices after discovering that Apple's 'includeAllNetworks' VPN framework leaks traffic to Apple servers outside the VPN tunnel, exposing users' local IP addresses. IVPN files a bug report with Apple and removes the feature to avoid providing a false sense of security.
AntiTracker Plus upgrade with ten blocklist options
IVPN upgrades AntiTracker with AntiTracker Plus, expanding from a single blocklist (OISD Big) to ten different blocklist options organized into Basic, Comprehensive, and Restrictive tiers. Users gain granular control over the balance between privacy protection and website compatibility.
Company renamed from Privatus Limited to IVPN Limited
The company formally changes its legal name from Privatus Limited to IVPN Limited to align the brand and legal entity names. Ownership structure, team, registration number, Gibraltar jurisdiction, and all operational details remain unchanged. The announcement is made publicly with full transparency.
Sixth Cure53 audit focuses on web infrastructure
Cure53 completes the sixth annual security audit, focusing on IVPN's customer website and underlying servers. The assessment finds only two low-severity vulnerabilities and two general weaknesses, confirming a substantially secure posture. Results are published publicly.
IVPN discloses Android DNS traffic leak affecting all VPNs
IVPN publishes findings that Android OS leaks plaintext DNS traffic outside VPN tunnels even with 'Always-on VPN' and 'Block connections without VPN' enabled. The issue affects all VPN apps on Android, not just IVPN's. The company advises users to consider avoiding Android for privacy-sensitive activities until Google fixes the OS-level bug.
IVPN acquires Safing, maker of Portmaster and SPN
IVPN acquires Safing ICS Technologies GmbH, the company behind the open-source Portmaster firewall and SPN network. Nicholas Pestell becomes 100% owner of both entities. Portmaster and SPN remain open source with unchanged business model and pricing. Safing founders Raphael and Daniel take advisory roles during the transition.
Mailx audited open-source email aliasing launches in beta
IVPN launches Mailx, an audited open-source email aliasing and forwarding service, in closed beta for Pro customers with at least one year remaining. The service severs the link between IVPN and Mailx accounts after signup to prevent cross-service correlation. Source code and initial Cure53 audit results are published.
V2Ray censorship obfuscation available on all platforms
IVPN completes cross-platform rollout of V2Ray obfuscation, which masks WireGuard connections as standard HTTPS or HTTP traffic to bypass network-level VPN blocking. Two modes are available: VMESS/QUIC and VMESS/TCP. The feature helps users in countries like China, Iran, and Russia where VPN traffic is actively filtered.