2026 security assessment of our Android app
Our Android app has for the second time passed MASA, a standardized security assessment, conducted by Leviathan Security Group.
A security audit of GotaTun is now available
In December we wrote about our new WireGuard implementation GotaTun, which is currently used in our Android app. An independent audit by Assured Security Consultants is now available.
New security audit of account and payment services
Late last year X41 D‑Sec GmbH performed a white‑box source‑code audit of the Mullvad payment and account API and its supporting backend services.
Independent security audit of our web app completed by Assured
Assured completed an independent security assessment of our web app. The assessment found no critical, high, or medium-severity issues. One low-severity input validation weakness was identified and promptly fixed.
Launching Mullvad VPN loader
Today we're launching Mullvad VPN loader - a new application for installing the Mullvad VPN desktop app on Windows and macOS which is both fast and secure.
Successful security assessment of our Android app
Our Android app (version 2024.9) has successfully passed MASA, a standardized security assessment, conducted by NCC Group.
The report for the 2024 security audit of the app is now available
The third party security audit of the Mullvad VPN app has concluded that the app has a high security level. Some non-critical issues were found, and have been fixed to the extent possible.
Fourth Infrastructure audit completed by Cure53
We contracted Cure53 with performing a security audit towards our VPN infrastructure between 3rd June 2024 and 14th June 2024, this is our fourth audit in total, second with Cure53.
Infrastructure audit completed by Radically Open Security
We tasked the Netherlands based security firm Radically Open Security (RoS) with performing the third audit towards our VPN infrastructure.
Security audit of our leta.mullvad.net search service
Assured AB were contracted to perform a security assessment of our new Leta search service between 2023-03-27 and 2023-03-31.