Home / Articles / Security Analysis of Top VPN Providers
Man in the Middle

Security Analysis of Top VPN Providers

In this article we (FindVPN.com team) would like to tell the study which was focused on security of Personal VPN Service Providers. It is a well known fact that hackers quite often sniff public Wi-Fi hotspots and eavesdrop (perform MITM atttack) Internet traffic, and moreover they are capable to collect confidential information from unprotected laptops, tablets, smartphones which are connected to these public Wi-Fi hotspots. The attack is called “Man in the Middle” or MITM  and it is very dangerous, because in some circumstances the attacker is able to capture encrypted data transferred over HTTPS tunnels. The success of an MITM attack depends on multiple factors, one of them is improperly configured web server.  The attacker could exploit weakly configured SSL/TLS protocols and possibly intercept and decrypt over a secure connection. The only way to protect from an MITM attack is proper configuration of the webserver and Web Application Firewall (WAF).

maninthemiddle

Study Methodology

For the study we enumerated all known to us (as of December 23, 2015) Personal VPN Service providers and performed free SSL tests. Each VPN Service website was tested with free online “SSL Server Test” tools: one is High-Tech Bridge and the other is Qualsys.

Results of our study are provided in the table below, and scores rank from F to A+. Where F is the lowest score and A+ is the highest. Separate article about Worst VPN Providers will be provided later this month.

ProviderURLHTBQualsys
VPNLandVisitA+A
StrongVPNVisitA+A
TunnelBearVisitA+A
PureVPNVisitA+A
Private Internet AccessVisitA+A
ExpressVPNVisitA+A+
ibVPNVisitFF
HideMyAssVisitA+B
VyprVPNVisitA+A
NordVPNVisitA+A
VPN.ACVisitA+A+
CactusVPNVisitFF
SwitchVPNVisitBC
KepardVisitAA
VPN.SVisitA+A
Hide.MeVisitA+A+
LeVPNVisitA+A
Internetz.meVisitA+A+
VPN AreaVisitBB
Astrill VPNhttps://www.astrill.com/A+A-
Proxpnwww.proxpn.comA-B
Boxpnwww.boxpn.comA+A
IronSocketwww.ironsocket.comA+A
VPNGatewww.vpngate.comFT
CyberGhostwww.cyberghost.comNo SSLNo SSL
LiquidVPNwww.liquidvpn.comA+A
TorGuardhttps://torguard.net/A+A
F-Secure Freedomhttps:// www . f - secure . com /A-B
PerfectPrivacyhttps://www.perfect-privacy.comA+A+
OverPlaywww.overplay.netA+C
BlackVPNwww.blackvpn.comA+A
VPN.ASIAwww.vpn.asiaA-C
ZPNhttps://zpn.im/A+A-
SlickVPNwww.slickvpn.comA+A
iPredatorwww.ipredator.seA+A+
VPNUnlimitedhttps://www.vpnunlimitedapp.com/A+A+
VPN Shieldhttps://www. vpnshield app.com/A-B
WiTopiawww.witopia.comtimeouttimeout
PrivateVPNwww.privatevpn.comA+A
EarthVPNVisitAA
Bufferedwww.buffered.comA+A
ZoogTVwww.zoogtv.comA+A
Trust.Zonehttps://trust.zone/A+A
Privatoriahttps://privatoria.net/A-B
MyExpatNetworkhttp://www.my-expat-network.com/A+A
VPNTunnelwww.vpntunnel.comFC
SurfEasywww.surfeasy.comA+A
Tunnelrwww.tunnelr.comA-C
FrootVPNwww.frootvpn.comA+A
Smart DNS Proxyhttps://www. smartdnsproxy .com/A+A
Blocklesswww.blockless.comA+A
Disconnecthttps://disconnect.me/A-B
NoLimitVPNwww.nolimitvpn.comA+A
AceVPNwww.acevpn.comA+A
VikingVPNwww.vikingvpn.comA+A
Proxy.Shhttps://proxy.sh/AС
TowerVPNwww.towervpn.comFF
MyPrivateNetworkhttps://www.my-private-network.co.uk/A+A
Mullvadhttps://www.mullvad.netA+A+
AirVPNhttps://airvpn.org/A+A+
HotspotShieldwww.hotspotshield.comFF
BolehVPNhttps://bolehvpn.net/A+A
UnblockUshttps://www.unblock-us.com/A+A
HideIPVPNwww.hideipvpn.comFF
ShadeYouVPNwww.shadeyouvpn.comAA
WaselProwww.waselpro.comFF
CryptoStormhttps://cryptostorm.is/A+A
WorldVPNhttps://www.worldvpn.net/A+A
GoTrustedwww.gotrusted.comAB
BeeVPNwww.beevpn.comC+C
UkProxyServerwww.ukproxyserver.comFC
OkayFreeedomhttps://www.okayfreedom.com/en/A+A
Anoninewww.anonine.comFC
BTGuardwww.btguard.comFF
VPN4Allwww.vpn4all.comFC
TvWhenAwayhttps://www.tvwhenaway.co.uk/AA+
ExpatSurferhttps://www.expatsurfer.co.uk/A+A
LibertyVPNhttps://www.libertyvpn.netC+F
ClearVPNhttp://clearvpn.net/No CertNo Cert
Faceless.mehttps://faceless.me/FC
VPNJackwww.vpnjack.comNo CertNo Cert
MyVPN.Prohttp://www.myvpn.pro/No CertNo Cert
iVPNhttps://www.ivpn.net/A+A+
TellyPortVPNwww.tellyportvpn.comNo CertNo Cert
iPinatorhttp://ipinator.com/BB
ZorroVPNhttps://zorrovpn.com/A+A
DoubleVPNhttps://www.doublevpn.com/en/A+A
Hideme.ruhttp://hideme.ru/FF
AproVPNhttp://aprovpn.com/A+A-
HotVPNhttp://www.hotvpn.com/FF
Cheap-VPNhttp://www.cheap-vpn.com/FC
TheSafety.usTheSafety.usFC
ProstoVPNhttp://prostovpn.org/No Certno cert
CryptoVPNhttps://www.cryptovpn.com/A+A
WebmasterVPNhttp://webmastervpn.com/FC
Safe-Inethttp://safe-inet.com/en/mainFF
V-P-N.RUhttp://v-p-n.ru/Fcert mismatch
Wafers.cchttp://wafers.cc/index/ru/Fcert mismatch
Elite VPN Servicehttps://vpn-service.us/BC
Secretsline.bizhttp://secretsline.biz/A+A
Kebrum.comhttps://en.kebrum.com/FC
http://pogodi.nu/http://pogodi.nu/No CertNo Cert
TrustVPNhttp://trustvpn.info/A+A
IPVanishhttps://www.ipvanish.comA+A
ZenVPNhttps://zenvpn.net/en/A+A+
BananaVPNhttps://www.banana-vpn.com/C+F
VPNAccounts.comhttp://www.vpn-accounts.com/Bcert mismatch
http://12vpn.com/https://12vpn.net/A+A+
https://www.securevpn.pro/eng/https://www.securevpn.pro/eng/FC
http://in-disguise.com/http://in-disguise.com/A+A
Ivacy VPNhttps://www.ivacy.com/A+A

Check Also

New Danger For Androids Malware Can Erase Data

Many Android VPN Services Offer Poor Security: Study

The majority of android-based VPN applications offer poor security services to their clients, a study …

Leave a Reply

Your email address will not be published. Required fields are marked *