The Mullvad Blog

Our Android app (version 2024.9) has successfully passed MASA, a standardized security assessment, conducted by NCC Group. Read more

The third party security audit of the Mullvad VPN app has concluded that the app has a high security level. Some non-critical issues were found, and have been fixed to the extent possible. Read more

We contracted Cure53 with performing a security audit towards our VPN infrastructure between 3rd June 2024 and 14th June 2024, this is our fourth audit in total, second with Cure53. Read more

We tasked the Netherlands based security firm Radically Open Security (RoS) with performing the third audit towards our VPN infrastructure. Read more

Assured AB were contracted to perform a security assessment of our new Leta search service between 2023-03-27 and 2023-03-31. Read more

Assured AB were contracted to perform a security assessment of our account and payment services between 2022-11-07 and 2022-11-29. Read more

A security assessment of the Mullvad VPN apps has concluded that the app is well-architected from a security perspective. Some issues were found, and they have been fixed to the extent possible. Read more

We are now running our own self-hosted authoritative DNS servers which we have spread around the world for redundancy, trust and performance. Read more

We tasked the Gothenburg based security consulting firm, Assured AB with performing a security audit towards our VPN infrastructure. Read more

We have released a beta of our encrypted DNS. Hosted and created by us, an audited non-logging VPN service. We are thirsting for your input before we take this service to the next level. Read more