If the user continues to add more connections, eventually exceeding the count 5, which is our limit – all the connections are instantly terminated (and the user will receive an email stating that they have violated our “multilogins limit”).ĥ. If another connection is added on top of that, it becomes 3. We simply rely on the LIVE connection state to find the number of active connections, which are immediately cut off if they exceed the specified limit.įor instance, if one of our users connects to any VPN node and then uses the same account to establish another VPN connection, the count number switches from 1 to 2 on our centralized session manager (audited by the independent auditors). We don’t need logs to watch for simultaneous user connections. How do you verify being logless but still impose limits on simultaneous connections? Our next move, that we are keeping close to the chest for now, will be equally exciting and Industry-first for our privacy conscious subscribers.Ĥ. We strive day and night to deliver more and more value to millions of subscribers in over 120 countries who trust their security and privacy with us. Apart from being the first to comply with GDPR and having the most transparent Privacy Policy to date, PureVPN is the first and only provider to have a public paid bug bounty program (/purevpn) where 90,000+ strong community of white hat hackers continuously test and strengthen our service.
#PUREVPN MEMBERS AREA SERIES#
This audit is part of a series of steps that we are taking to further cement our commitment to true privacy. What additional steps, if any, are you planning to reassure users of highest privacy standards?
#PUREVPN MEMBERS AREA FULL#
Full Audit report is available for publishers upon request and has been made available for all our users inside Members Area.ģ. They also looked at our databases and traced the entire data flows to ensure that no user identifiable information was stored nowhere. They looked at everything from our VPN servers to configurations to systems services and APIs. We allowed and provisioned all accesses for them to pick up which systems they’d want at their will. The uniqueness of the scenarios and the number of audit activities were unexpected. The Altius IT team surprised us with their thoroughness with the company principals becoming mystery users, conducting hands-on audit work and threat analysis. And they understand the privacy nuances required by Internet scale companies to operate in a global setting.
They have experience with Internet scale enterprise and consumer architectures. They are based in California which is well known for large scale consumer Internet companies. We chose Altius IT due to their 25-year track record and accreditation for security audits (ISACA for CISA, CRISC & CGEIT). Since PureVPN only recently released news about their audit, they were quite proactive in responding to our questions, providing detailed answers: They also tested PureVPN’s system log files, network infrastructure documents, and system configurations, following which they officially gave PureVPN a clean chit on their no-logs claims.Īs audits are becoming a trend in the VPN industry, I decided to come up with a series of technical queries, sending them to different VPN services that have undergone an audit. The security audit firm, Altius IT, analyzed PureVPN’s logs regarding DNS queries, outgoing traffic, visited websites, browsing history, connection time, user’s originating IP address,assigned VPN IP, connection logs, and browsing activities. PureVPN joins the ranks of top VPN services to get their no-logs claims verified, as part of their commitment to delivering strong privacy and security to its customers around the world, despite being incredibly pocket-friendly which makes it the best cheapest VPN!
PureVPN gets audited by Altius IT, so I decided to ask them a few technical questions!
0 kommentar(er)
