CyberGhost's privacy record rests on one kind of evidence done well and several kinds absent
85 out of 100, built from two weighted parts
App store ratings, part of the score
4.234.23
Researched Oct 3, 2026Claims checked: 23Separate source groups: 18Scores updated Oct 8, 2026
CyberGhost offers 11,500+ servers in 100 countries, 7 simultaneous devices and a 45-day money-back guarantee. It says Deloitte has reviewed its no-logs setup, which is the provider's own statement; we have not cleared the report.
How the 85 is built
Points per criterionSee the evidenceClaims checked: 23Separate source groups: 18
45-day money-back guarantee
11of 15 ptsSolid EverydaySpeeds
Ranked #8 of 22 VPNs for speed in our Speed Lab.
CyberGhost ranked #8 of 22 providers in our speed rankings, built from published third-party test results.
#2of 22Top 3 forServer Networks
9,600+ servers across 100 countries.
One of the largest VPN networks globally with 9,600+ servers in 100 countries. CyberGhost offers extensive coverage and specialty servers for P2P, streaming, and obfuscation.
100 countries · 7 simultaneous devices · P2P & streaming servers
12of 15 ptsSolid CoreSecurity
Solid security, with a caveat or two.
Strong scores in Protocol (WireGuard). Room to improve in Security (Not audited).
CyberGhost VPN uses industry-standard security protocols to ensure everyday privacy and protect users' data online.
7of 10 ptsReliable forMost Platforms
Handles most streaming, not all.
CyberGhost accesses 7+ Services, though performance varies by region.
CyberGhost uses dedicated, optimized streaming servers to reliably access geo-restricted content without extra settings.
19of 20 ptsStraightforwardto Use
Easy on every device you own.
CyberGhost excels across the board here, scoring 10/10 for Devices and 9/10 for Connections.
CyberGhost is built for simplicity and gets users protected quickly without requiring technical knowledge.
No technical expertise required. If you can install regular software, you can set up CyberGhost. Advanced users have granular control when needed.
#2of 22Top 3 forTrust
Trusted at scale, priced fairly.
Strong scores in Value (2-year $2.19/mo), Money-Back (45 days), Support (24/7 live support).
CyberGhost offers multiple pricing tiers and plan durations. Longer commitments typically offer bigger discounts. All plans backed by 45-day money-back guarantee.
All plans and add-ons
Pick a billing period and compare every tier side by side.
Best for Short-term use, testing the service, or flexibility without commitment
Best for Medium-term commitment with better value than a monthly commitment
Best for Long-term users wanting maximum savings, streaming, privacy, multi-device protection, and extras like dedicated IP or bundled security
A plain-language breakdown of everything in the plans above: what each feature is, who it helps, and whether it is worth paying for.
All plans include:
CyberGhost operates 11,500+ servers across 100 countries. That is one of the largest server networks in the consumer VPN market. The network size creates real geographic flexibility for users who need specific country connections.
Founded in Romania and now owned by Kape Technologies, CyberGhost sits alongside ExpressVPN and Private Internet Access under one corporate umbrella. Its Romanian headquarters places it outside the Five Eyes and Fourteen Eyes surveillance alliances. Romania’s Constitutional Court struck down its 2012 data-retention law in 2014.
The 45-day money-back guarantee is longer than the 30 days most competitors offer. That extra 15 days gives new users meaningful time to test streaming servers, speeds across different locations, and app compatibility before committing.
CyberGhost recorded 612 Mbps in the Speed Lab, placing it 10th out of 22 providers ranked. Latency measured 25 ms. Those numbers tell only part of the story.
WireGuard delivers the fastest results on CyberGhost. Users on nearby servers will see speeds well above 500 Mbps with this protocol. OpenVPN drops throughput noticeably, often landing 30-40% lower than WireGuard on the same server. IKEv2 falls between the two.
For daily browsing and standard streaming, CyberGhost handles 4K content without buffering on most servers. Gaming performance depends heavily on server distance. Connecting to a server in your own country keeps latency manageable. Jumping across continents pushes ping times above 100 ms, which competitive gamers will feel immediately.
The sheer number of servers helps during peak hours. With 11,500+ servers available, individual server loads stay lower than providers running smaller networks. Users in congested regions can switch between multiple servers in the same country to find better performance.
CyberGhost is headquartered in Bucharest, Romania. Romania sits outside the Five Eyes and Fourteen Eyes alliances. We could not establish whether any current Romanian data-retention duty reaches a VPN provider, so treat the jurisdiction as a mild plus, not a guarantee.
The NoSpy server program is CyberGhost’s most distinctive security feature. CyberGhost says these servers are owned colocated hardware in Romania that only its own team can physically access, with no third-party data center operator involved. The share of its fleet that is owned rather than rented was not found.
Most VPN providers rent server space from colocation facilities. That means a third party could theoretically access the hardware. If CyberGhost’s description holds, NoSpy removes that dependency. Users who prioritize physical server security should route their traffic through these servers specifically.
CyberGhost publishes quarterly transparency reports. These reports detail the number of legal requests received, and CyberGhost says it had no user data to hand over. Deloitte Audit Romania has run three limited-assurance engagements on CyberGhost’s no-logs configuration, and the December 2025 report is publicly downloadable. Each is a point-in-time review against CyberGhost’s own description of its setup, and the 2022 and 2024 reports are available only to customers. In the 2025 report Deloitte found nothing contradicting that description as of 31 October 2025. These are no-logs assurance reviews, not security audits, and we found no published independent penetration test of CyberGhost’s apps or infrastructure.
CyberGhost uses AES-256 encryption across all protocols. WireGuard, OpenVPN, and IKEv2 are all available. The kill switch activates automatically on desktop apps and can be toggled on mobile. DNS leak protection and IPv6 leak protection are enabled by default.
CyberGhost also offers split tunneling on Android and Windows. This lets users route specific apps outside the VPN tunnel while keeping everything else encrypted. macOS and iOS lack this feature currently.
Kape Technologies acquired CyberGhost in 2017. Kape’s predecessor company, Crossrider, was named in a 2015 Google and UC Berkeley study as one of about 1,000 businesses distributing ad-injecting software before rebranding in 2018. Kape now controls CyberGhost, ExpressVPN, and Private Internet Access. That concentration of VPN brands under one corporate entity is a structural concern worth acknowledging. The quarterly transparency reports and NoSpy infrastructure are concrete mitigations, but they do not eliminate the corporate concentration question.
CyberGhost labels specific servers for streaming platforms. These dedicated streaming servers are optimized and regularly updated to maintain access. This approach is more transparent than providers who force users to guess which servers work.
Netflix, Disney+, Amazon Prime Video, BBC iPlayer, and Hulu all work through CyberGhost’s streaming servers. The company lists exactly which server connects to which platform inside the app. Users do not need to test random locations.
Reliability fluctuates. Streaming platforms actively block VPN connections, and CyberGhost occasionally loses access to specific libraries for short periods. The dedicated server model means the company identifies and fixes these blocks faster than providers using general-purpose servers.
CyberGhost includes Smart DNS functionality at no extra cost. Smart DNS works on devices that cannot run VPN apps natively, like older smart TVs and gaming consoles. It accesses streaming content without encrypting traffic, which eliminates speed loss entirely.
Sports streaming works well through CyberGhost. Servers optimized for platforms like ESPN+, DAZN, and various international sports broadcasters appear in the server list. Live sports demand consistent connections without buffering, and the large server network helps distribute load during major events.
CyberGhost allows 7 simultaneous connections on a single account. That covers most households without needing a router-level setup.
Native apps exist for Windows, macOS, Linux, Android, iOS, and Fire TV. The Windows and macOS apps are the most polished. They surface server categories clearly: streaming servers, gaming servers, torrenting servers, and NoSpy servers each get their own section. Finding the right server takes seconds.
The Linux app runs through command line only. It works but lacks the visual interface of other platforms. Android and iOS apps are simplified compared to desktop versions. Android includes split tunneling. iOS does not.
Browser extensions for Chrome and Firefox provide proxy-based protection. These encrypt browser traffic only and do not protect other applications on the device. They work well for quick location changes when full VPN protection is unnecessary.
Router support covers most major firmware including DD-WRT, OpenWrt, and Tomato. CyberGhost also sells pre-configured routers for users who prefer a plug-and-play approach. Running CyberGhost on a router protects every device on the network and does not count against the 7-device limit.
Smart TV and gaming console users benefit from the Smart DNS feature or router installation. There are no native apps for PlayStation, Xbox, or most smart TV operating systems.
CyberGhost fits best for users who want simple streaming access across multiple platforms. The labeled streaming servers eliminate guesswork. The 45-day guarantee limits financial risk during testing.
Privacy-conscious users who want physical server ownership should use the NoSpy servers specifically. The Romanian jurisdiction and quarterly transparency reports provide solid accountability. Users who want the strongest possible privacy assurances may prefer providers like Mullvad that accept anonymous payment and collect no account information at all.
Families benefit from the 7 simultaneous connections and straightforward interface. Less technical users will appreciate the categorized server lists. Power users who want advanced configuration options may find CyberGhost too streamlined for their needs.
Users who are uncomfortable with Kape Technologies’ corporate history or the concentration of major VPN brands under one company should consider independent alternatives. That is a legitimate concern, and CyberGhost’s transparency measures address it partially but not completely.
Gamers should look elsewhere for competitive play. The 25 ms latency baseline works fine for casual gaming, but dedicated gaming VPNs offer lower latency and more server optimization for that specific use case.
Charts and reference images from our research, free to view and share.
CyberGhost pairs an unusually large infrastructure footprint (11,500+ servers across 100 countries) with a distinctive privacy angle: Romanian jurisdiction outside the Five/Fourteen Eyes alliances. It backs every plan with a 45-day money-back guarantee, longer than the 30-day industry standard, and layers in NoSpy servers that it says it owns and operates directly rather than renting from third-party data centers.
CyberGhost ranks #10 of 22 in our Speed Lab, aggregated from published third-party tests, a mid-pack result driven mostly by protocol choice. WireGuard delivers the fastest throughput on its network, while OpenVPN runs 30-40% slower on the same server. Connecting to a nearby server keeps gaming latency manageable; jumping continents pushes ping noticeably higher.
Yes, through dedicated servers labeled specifically for Netflix, Disney+, Amazon Prime Video, BBC iPlayer, Hulu, and Max, so users don’t need to guess which location works. CyberGhost also includes free Smart DNS for devices without native apps, like older smart TVs, which skips encryption entirely to avoid speed loss. Access occasionally drops on individual libraries but is typically restored quickly.
Largely yes, though the ownership history warrants scrutiny. Kape acquired CyberGhost in 2017; its predecessor, Crossrider, was named in a 2015 Google and UC Berkeley study as distributing ad-injecting software before rebranding. Kape also owns ExpressVPN and Private Internet Access. CyberGhost points to three Deloitte limited-assurance reviews of its no-logs setup (the 2025 report is public) and quarterly transparency reports detailing legal requests received.
CyberGhost says NoSpy servers are CyberGhost-owned machines in Romania that only its own team can physically access, removing any third-party colocation provider from the equation. Most VPNs rent server space, creating theoretical physical-access risk; if CyberGhost’s description holds, NoSpy removes that dependency. Users prioritizing physical server security, rather than casual streaming users, should route traffic through these specifically.
Partly. Romania sits outside both the Five Eyes and Fourteen Eyes surveillance alliances, and its Constitutional Court struck down the 2012 data-retention law in 2014, but we could not establish whether any current retention duty reaches a VPN provider. The company’s quarterly transparency reports say it had no user data to hand over to authorities.
CyberGhost’s cheapest rate is from $2.19/month on its longest-term (2-year) plan, a steep discount off its standard monthly rate. Longer commitments access larger savings and bundle extras like a password manager and cloud storage on certain tiers. All plans, regardless of length, include the same 45-day money-back guarantee for testing before committing further.
CyberGhost offers a 45-day money-back guarantee, 15 days longer than the 30-day standard most competitors use. That extra window gives new users real time to test streaming servers across different countries, run speed checks, and confirm app compatibility on their specific devices before the trial period closes and a purchase becomes final.
A single CyberGhost subscription supports 7 simultaneous device connections, enough for most households without router configuration. Native apps exist for Windows, macOS, Linux, Android, iOS, and Fire TV. Installing CyberGhost on a supported router instead protects every device on that network and does not count against the 7-device limit at all.
No, split tunneling is only available on the Android and Windows apps, letting users exclude specific apps from the VPN tunnel while everything else stays encrypted. macOS and iOS currently lack this feature entirely. CyberGhost also skips multi-hop and Tor-over-VPN options, features some competitors include for extra routing flexibility.
CyberGhost encrypts traffic with AES-256 and ChaCha20 across WireGuard, OpenVPN, and IKEv2 protocol options. The kill switch activates automatically on desktop apps and can be toggled manually on mobile. DNS leak protection and IPv6 leak protection are both enabled by default, so users don’t need to configure them separately after installation.
Use CyberGhost’s free Smart DNS feature, which works on devices that can’t run VPN apps directly, like older smart TVs and consoles, without encrypting traffic. Alternatively, install CyberGhost on a compatible router (DD-WRT, OpenWrt, or Tomato firmware, or one of CyberGhost’s pre-configured routers) to protect every connected device on the network at once.
Streaming platforms actively block VPN traffic, so CyberGhost occasionally loses access to specific libraries for short periods. Because it uses dedicated, labeled streaming servers rather than general-purpose ones, the company typically identifies and fixes these blocks faster. Switching to another server explicitly tagged for that platform inside the app usually restores access quickly.
Deloitte Audit Romania found nothing contradicting the no-logs description written by CyberGhost as of 31 October 2025 (limited assurance), in a report dated 19 December 2025 that can be downloaded behind a click-through. CyberGhost has commissioned three such Deloitte engagements (announced in September 2022, May 2024 and February 2026); each is a point-in-time, limited-assurance review of a description written by CyberGhost, and only the 2025 report was found publicly available.
nothing has come to our attention that causes us to believe that CyberGhost’s configuration of IT systems and management of the supporting IT operations as of October 31st, 2025, were not prepared, in all material respects,The procedures we performed do not provide any assurance about “CyberGhost’s No-logs Policy” for any other period.The full assurance report is available for download, so that anyone can read the findings in full.Deloitte Audit S.R.L. conducted an audit to check that our VPN servers are in compliance with our privacy policy. To view the report, please agree to the disclaimer below.Because of the extensive nature of the audit and the scope of Deloitte services, excerpts from the report cannot be shared directly.The US National Vulnerability Database lists four CVEs for the Windows client of CyberGhost. Three (CVE-2018-10646, CVE-2023-30237 and CVE-2024-26330) have researcher advisories that were read; the fourth, CVE-2025-51726, is a researcher claim that NVD has not yet analysed. For CVE-2023-30237 and CVE-2024-26330 the researchers report an unproductive first response from the vendor before a fix: the first was fixed in version 8.3.10.10015 on 24 February 2023 and the second was marked resolved on 13 March 2024.
CyberGhost 6.5.0.3180 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "CG6Service" service.CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe.After a successful logout, user credentials remain in memory while the process is still open, and can be obtained by dumping the process memory and parsing it.CyberGhostVPNSetup.exe (Windows installer) is signed using the weak cryptographic hash algorithm SHA-1, which is vulnerable to collision attacks.CyberGhost for Windows suffers from a `SYSTEM` privilege escalation vulnerability through the `CG6Service` service.A specially crafted JSON payload sent to the CyberGhost RPC service can lead to command line injection when the OpenVPN process is launched, leading to full system compromise.The latest 8.3.10.10015 version released on the 24 February 2023 fixes this issue.We are sorry that you have had this experience with us on BugcrowdIn an independent test of the Windows client, it was found that the client retains login credentials in memory until restart, even after the user has logged out.2024/02/01 vendor responded, stating that attackers with local access are outside of application's threat model2024/03/13 status changed to resolvedCyberGhost states that its VPN servers run on a RAM disk with full-disk encryption, with services in ephemeral containers and no persistent storage. Deloitte inspected VPN and distribution servers (with deployment processes checked on a sample basis) and found nothing contradicting that description as of 31 October 2025; this is limited assurance on a description written by CyberGhost, not a confirmation that every server is RAM-only.
All VPN servers run on a RAM disk leveraging full disk encryption. Once a VPN server loses power, all data associated with it is immediately lost.Inspection of relevant IT systems (VPN servers, distribution servers, etc.) and verification of their configuration against the description providedBy running its VPN service on RAM-only servers, the company can ensure that all server data is immediately deleted with every reboot.CyberGhost was acquired by Crossrider in March 2017 for 9.2 million euro; Crossrider was renamed Kape Technologies in 2018, and Kape also owns ExpressVPN, Private Internet Access and ZenMate. In 2023 Kape, in which Teddy Sagi already held about 55 percent, accepted a takeover offer from Unikmind, a vehicle of Sagi, and moved to cancel its London AIM listing.
Crossrider said on Tuesday it has acquired cyber security software-as-a service (SaaS) provider Romanian company CyberGhost for a total of 9.2 million euroKape used to be known as Crossrider until it changed its name in 2018 to move away from its advert-slinging past and reinvent itself as a cybersecurity outfit.Kape now owns VPN services CyberGhost VPN as well as ZenMate and Private Internet Access, and with ExpressVPN onboardCyberGhost has been part of Kape Technologies (LSE:KAPE) since 2017.In practical terms, the company stopped its browser SDK business to focus on the VPN sector, purchasing CyberGhost VPN in 2017.Kape Technologies plc (formerly Crossrider Ltd.) is a British-Israeli information security company owned by businessman Teddy Sagi.its board had accepted an offer of £2.85 per share from Unikmind. Israeli businessman Sagi already owns a 55% stake in Kape.Unikmind intends to pass a written resolution in the near future which will result in Kape making an application to the London Stock Exchange for the cancellation of the admission to trading of Kape shares on AIM.Published speed results and expert reviews for every major VPN.
NordVPN
Our top-rated VPN
Speed
#1 / 22
Latency
18 ms
View full review →
ExpressVPN
Lightning-fast speeds
Speed
#2 / 22
Latency
22 ms
View full review →
PIA
Open source and transparent
Speed
#4 / 22
Latency
24 ms
View full review →
ProtonVPN
Swiss privacy meets unlimited bandwidth
Speed
#5 / 22
Latency
22 ms
View full review →
Surfshark
Unlimited devices
Speed
#6 / 22
Latency
20 ms
View full review →
Mullvad VPN
Privacy-first VPN with no accounts required
Speed
#7 / 22
Latency
20 ms
View full review →