VPN provider review

Proton VPN Review: Audit Evidence, Free Plan, and Limits

Review Proton VPN’s public audit evidence, Free versus Plus plans, Secure Core, and documented kill-switch limitations before choosing a VPN.

Proton VPN is a useful candidate if you want a free entry point, inspectable application code, and publicly linked audit material. Its strongest buying case is the ability to examine evidence and try the basic service before committing, not a promise of complete anonymity.

Aerod verdict

Start with Free for basic routing; compare Plus only for features you need.

Proton’s documentation makes its trust model easier to investigate. Still check your platform: its own kill-switch guide lists Apple-specific limitations that matter more than a generic “leak protection” label.

What Aerod reviewed

This is a documentation-based review checked September 2, 2026. We read the provider’s current audit announcement and feature guides, plus Securitum’s original 2025 report. The 2026 report linked through Proton Drive did not expose readable report content in this research session, so we do not present its findings as independently inspected. No Aerod speed, streaming, uptime, or leak benchmark was performed.

Audit evidence: separate the announcement from the report

Proton’s June 16, 2026 update announces a fifth annual Securitum no-logs audit and links the reports. That supports a provider-reported 2026 result; it does not make every Proton product or operational claim independently verified.

The original 2025 Securitum report was directly readable. Its on-site work ran August 18–20, 2025, and the final document is dated September 19. The auditors reported no activity logging or user-attributable connection metadata in the examined VPN infrastructure. Their work sampled production servers in a guided review.

Importantly, that report excludes account-management systems, the build/deployment pipeline, formal source-code review, and binary analysis. Its conclusions are point-in-time and scoped—not proof about every server forever, all account records, or the installed app on your device.

Free vs Plus: choose the plan by the task

According to Proton’s plan documentation, Free provides unlimited data with a restricted service selection. Paid plans add more server choice and features such as Secure Core. Check the current plan table for device allowances and specialized uses instead of assuming Free includes the whole paid feature set.

Your needStarting pointWhat to verify
Try ordinary VPN routing without a subscriptionFreeAvailable locations, connection limits, and whether the route works for the actual application.
Choose a specific region or use additional routing featuresCompare PlusCurrent country availability, platform support, and the total contract cost.
Use several Proton servicesCompare the bundle separatelyWhether the extra products justify their cost; a bundle is not required merely to use a VPN.

Before paying, record the full upfront charge, renewal terms, cancellation/refund conditions, and currency. A low advertised monthly equivalent may require a much larger payment today.

Secure Core and open-source apps

Secure Core routes traffic through a Proton-controlled entry layer before another VPN exit, intended to reduce some risks from a compromised exit server. The additional route can add latency. It remains a Proton-operated service, not an independently administered Tor circuit or a way to hide a personal login.

Proton publishes application source code and audit links. Inspectable code is useful for scrutiny, but it does not independently prove deployed server behavior. Match each piece of evidence to the claim it actually covers.

Kill-switch limitations worth reading first

The official kill-switch guide distinguishes Standard mode, which covers accidental drops, from Advanced mode, which requires a VPN connection for internet access. Availability differs by platform.

For a connection that remains blocked after you disconnect, use the VPN disconnection troubleshooting guide to check the selected mode, DNS behavior, and any separate proxy configuration.

That guide currently warns of a brief possible IP exposure while switching servers on macOS and some Apple-service DNS requests bypassing the VPN on macOS/iOS. If those paths matter to your threat model, treat them as unresolved setup constraints, not as details an IP-check page can certify away.

Validate the connection you will actually use

  1. Record the app version, plan, protocol, routing mode, and chosen region.
  2. Review kill-switch settings and split-tunneling exclusions for that platform.
  3. Check visible IP and network ownership from the routed browser.
  4. Inspect WebRTC candidates and the DNS configuration; a browser page cannot observe all operating-system traffic.
  5. With no sensitive activity in progress, test disconnect, reconnect, server switching, and sleep/wake behavior.
  6. Review browser accounts, cookies, and fingerprinting signals separately.

Compare the alternative in NordVPN vs Proton VPN, return to the VPN shortlist, or read VPN vs Tor if unlinkable browsing—not ordinary routing—is the objective.

FAQ

Is Proton VPN Free the same as Plus?

No. Free offers basic VPN access with unlimited data, while paid plans add server choice and features. Check current device, location, and feature limits for the task you need.

Did Aerod inspect the latest Proton VPN audit report?

Aerod read Securitum’s original 2025 report and Proton’s 2026 announcement. The linked 2026 report was not readable in this research session, so its result remains attributed to Proton.

Does Secure Core make me anonymous?

No. It changes the VPN route and its risk profile. Account identity, browser state, device compromise, and other observers remain separate concerns.

Sources and review date

Sources checked September 2, 2026. Provider claims, original reports, and Aerod’s interpretation are distinguished above.