Mullvad VPN | Privacy is a universal right (original) (raw)
2026 security assessment of our Android app
June 1, 2026 External auditsApp
Our Android app has for the second time passed MASA, a standardized security assessment, conducted by Leviathan Security Group.
A security audit of GotaTun is now available
March 6, 2026 NewsExternal audits
In December we wrote about our new WireGuard implementation GotaTun, which is currently used in our Android app. An independent audit by Assured Security Consultants is now available.
New security audit of account and payment services
January 21, 2026 External audits
Late last year X41 D‑Sec GmbH performed a white‑box source‑code audit of the Mullvad payment and account API and its supporting backend services.
Independent security audit of our web app completed by Assured
October 23, 2025 External audits
Assured completed an independent security assessment of our web app. The assessment found no critical, high, or medium-severity issues. One low-severity input validation weakness was identified and promptly fixed.
Launching Mullvad VPN loader
May 19, 2025 AppExternal audits
Today we're launching Mullvad VPN loader - a new application for installing the Mullvad VPN desktop app on Windows and macOS which is both fast and secure.
Successful security assessment of our Android app
March 27, 2025 External audits
Our Android app (version 2024.9) has successfully passed MASA, a standardized security assessment, conducted by NCC Group.
The report for the 2024 security audit of the app is now available
December 11, 2024 SecurityExternal auditsApp
The third party security audit of the Mullvad VPN app has concluded that the app has a high security level. Some non-critical issues were found, and have been fixed to the extent possible.
Fourth Infrastructure audit completed by Cure53
June 27, 2024 External audits
We contracted Cure53 with performing a security audit towards our VPN infrastructure between 3rd June 2024 and 14th June 2024, this is our fourth audit in total, second with Cure53.
Infrastructure audit completed by Radically Open Security
August 9, 2023 External auditsSecurity
We tasked the Netherlands based security firm Radically Open Security (RoS) with performing the third audit towards our VPN infrastructure.
Security audit of our leta.mullvad.net search service
May 16, 2023 External auditsSecurity
Assured AB were contracted to perform a security assessment of our new Leta search service between 2023-03-27 and 2023-03-31.