



They spent 37 days poring over every part of TunnelBear, and we're happy to share the results. TunnelBear a clear frontrunner among its VPN competitors when it comes to security.įor this year's report, we hired Cure53 for a third time because of our mutually established work methods, and the familiarity Cure53 now has with our technology stack. It feels like more providers are embracing transparency, but there’s a long way to go before audits are an industry standard. While there were a few more companies that released audits of their own in 2018, many of them were limited in scope or never released for public review. We released a second security audit, making TunnelBear the only VPN provider to do back-to-back annual public full scope audits. We hoped that other providers would follow our lead and a small trickle have. A full audit and report of everything we do, apps, code, infrastructure. It's this philosophy that led us to release the consumer VPN industry's first security audit to the public in 2017. We believe in earning customer trust through transparency. You can find the full report on Cure53's website, but here's a quick breakdown. We hired Cure53 to audit our entire codebase, infrastructure, website and apps so we could have a clear picture of TunnelBear's current security posture. With that, we'd like to announce the results of our third annual independent security audit. However, we’ve learned that reexamining our work makes TunnelBear better, safer and more secure. One that every person on the TunnelBear engineering teams touched at some point. We'd like to announce the results of our third annual independent security audit We were even awarded "Best VPN" by the Wirecutter, which is no small feat. We tightened security, sped up connections and built new servers. 2019 in reviewĢ019 was a big year for TunnelBear as we rapidly expanded our infrastructure and released an SDK that powers our partners VPN products. Whether it’s an improperly configured API or a zero-day that's just been discovered, if you aren't regularly looking for security vulnerabilities, it's only a matter of time before they find you. There are a lot of moving parts to keeping a company secure. Three years of security audits have shown us that today's secure system is tomorrow's bug report. Internet security is an ever-evolving concern. Now we're releasing the results of those tests for the third year in a row. For example, we annually hire a group of recognized security experts to tear apart TunnelBear's entire codebase, server infrastructure, website and apps. If your VPN provider can't prove they're doing everything in their power to protect your privacy, it's probably time to look for a new VPN.
