Mullvad’s Response to the "TunnelCrack" vulnerability disclosure. Except for iOS, we are unaffected by these findings. Read more here:

Mullvad VPN

Response to "TunnelCrack" vulnerability disclosure

Mullvad is mostly unaffected by the TunnelCrack VPN vulnerabilities. This is our response to the recently disclosed set of attack vectors on VPNs.

Our third VPN server audit has now been completed by Radically Open Security. “The Mullvad VPN relays which were the subject of this test showed a mature architecture, with the administrators demonstrating a high degree of experience and motivation to tackle the issues we found” Read the audit report here:

Mullvad VPN

Infrastructure audit completed by Radically Open Security

We tasked the Netherlands based security firm Radically Open Security (RoS) with performing the third audit towards our VPN infrastructure.