Research, reporting and guides
All publications
Evidence-led work on VPN technology, privacy, surveillance and practical online security.
Complete archive
Newest first.
19 publications, last updated Aug 28, 2026.
Can your VPN provider see your traffic? What 7,000 apps reveal
An evidence-led explanation of what a VPN provider can observe, what HTTPS still protects, and what Proton's mobile survey and independent app research establish.
How AmneziaWG 3.0 fights VPN fingerprinting
A code-checked analysis of AmneziaWG 3.0 and 3.1, Russia's changing VPN blocks, the limits of traffic randomization, and the evidence that remains missing.
Proton Protocols is not a new VPN protocol: what ProTUN changes
An evidence-led analysis of Proton's shared Rust WireGuard client engine, including the roles of ProTUN, libpvpnclient, LocalAgent and muon, plus source, audit and rollout limits.
VPN Protocol Transparency Report 2026
Among 20 core provider-developed technologies in the July 13, 2026 registry, 3 had a dedicated public assessment and 6 had full or partial public source located.
Mullvad donation controversy: What happened and should you switch?
A verified account of Daniel Berntsson's SEK 5 million political donation, Mullvad's response, the technical privacy impact and alternatives for users who choose to leave.
How DoVPN tests and reviews VPNs
The evidence standards, repeatable tests, scoring rules, refresh periods, and publication requirements used for DoVPN provider reviews.
EU Chat Control update: Is message scanning back until 2028?
The July 2026 EU votes moved a temporary message-scanning exception closer to reinstatement, but it is not law yet. This report explains the encryption exclusion and the limits of a VPN.
Android 16 VPN bypass: Tiny UDP Cannon explained
Tiny UDP Cannon can make Android send a small UDP payload outside VPN lockdown on affected builds. This analysis separates the confirmed mechanism from overbroad device claims and explains the mitigations.
VPN Protocol Comparison: Which Should You Use?
Compare WireGuard, OpenVPN, IKEv2 and 20 provider VPN technologies using documented source, audit, platform and restricted-network evidence.
Amnezia VPN self-hosted guide
Set up Amnezia VPN on your own VPS, including AmneziaWG 3.1, XRay Reality, migration requirements, router limits, practical risks and alternatives.
UK Online Safety Act age checks: privacy and VPN risks explained
The UK's Online Safety Act age-check duties are now being enforced. We explain what Ofcom requires, why VPNs entered the debate and what privacy risks remain.
OpenClaw security risks: RCE, exposed gateways and malicious skills
OpenClaw's rapid adoption brought critical gateway risk, exposed instances and malicious ClawHub skills. This analysis explains how self-hosters should lock down privileged AI agents.
Dutch authorities seized a Windscribe VPN server — what this means for privacy
Dutch police physically seized a Windscribe server. The report examines how RAM-only and no-logs designs hold up under real police action.
Vega OS VPN guide: NordVPN and IPVanish on Fire TV Stick 4K Select
A practical guide to setup, privacy limits, streaming fixes and alternatives when a preferred VPN is not yet available for Vega OS.
Vega OS VPN now live: NordVPN and IPVanish work on Fire TV Stick 4K Select
Amazon's update enabled VPN support on Vega OS. NordVPN and IPVanish apps now work on Fire TV Stick 4K Select.
EU Chat Control: how mass scanning proposals threaten privacy
An analysis of how the EU's scanning proposals could affect encryption, VPN providers and private communications.
Switzerland's VPN surveillance plan and what it means for privacy
What proposed Swiss surveillance rules could mean for ProtonVPN, PrivadoVPN and users relying on Swiss jurisdiction for privacy.
Vega OS VPN support: NordVPN and IPVanish prepare Fire TV apps
How Amazon's move from Fire OS to Vega OS changes VPN app support, privacy and streaming on new Fire TV hardware.
What is a VPN? How it works, benefits and limits
A plain-English guide to VPN tunnels, modern protocols, realistic privacy limits, setup and leak testing.