Browsing & traffic
Claims no storageDenies browsing and traffic-content logs.
Policy section: Policy introduction
← All VPNs
PROVIDER PROFILE
CyberGhost
A seven-device subscription with different introductory and renewal terms.
Source-based profile. We have not performed hands-on speed, leak, or streaming tests.
Plans, with the full bill.
| Plan & term | Monthly equivalent | Upfront bill | Renewal bill | Observed / source | Keep an offer |
|---|---|---|---|---|---|
| VPN1 months | $12.99USD / month equivalent | $12.99First 1 months | Renews at $12.99/month | 2026-11-06 Dated observation | Save this offer locally |
| VPN6 months | $6.99USD / month equivalent | $41.94First 6 months | Renews at $41.94/6 months | 2026-11-06 Dated observation | Save this offer locally |
| VPN28 months · 4 bonus included | $2.19USD / month equivalent | $61.32First 28 months | Renews at $61.32/year | 2026-11-06 Dated observation | Save this offer locally |
Tax may apply. Promotions and currency vary by location; optional add-ons excluded. Introductory promotions and availability may vary. A successful build does not refresh prices.
MATCH THE TIER AND THE DEVICE
What can you use with this plan?
Provider documentation describes these setup paths and conditions. We have not installed or tested them. An available app does not establish feature parity, streaming access or identical support on every operating-system version.
VPN · paid scope
Simultaneous VPN connections: 7. CyberGhost named plan and billing source (opens in a new tab)
Setup documentation describes available connection paths. It does not establish identical features on every app, server or subscription variant.
Scroll horizontally for platform conditions and official documentation.
| Platform / feature | What is established | Provider documentation |
|---|---|---|
| Windows | App listed App listed; confirm the supported OS version. | CyberGhost supported devices and setup paths (opens in a new tab) |
| macOS | App listed App listed; confirm the supported OS version. | CyberGhost supported devices and setup paths (opens in a new tab) |
| Linux | Manual setup CLI and manual OpenVPN paths; distribution requirements differ between documents. | CyberGhost Linux CLI and manual configuration (opens in a new tab) |
| Android | App listed App listed; confirm the supported OS version. | CyberGhost supported devices and setup paths (opens in a new tab) |
| iPhone / iPad | App listed App listed; confirm the supported OS version. | CyberGhost supported devices and setup paths (opens in a new tab) |
| Android TV | App listed Android TV app; Android 7+ in the support document. | CyberGhost supported devices and setup paths (opens in a new tab) |
| Apple TV | Not established Not established for this tier in this research. | No tier-specific evidence captured |
| Router | Manual setup Manual setup listed; compatible hardware and configuration required. | CyberGhost supported devices and setup paths (opens in a new tab) |
| Port forwarding | Not included Provider says port forwarding is not supported. | CyberGhost does not support port forwarding (opens in a new tab) |
| Bundle scope | Not established Additional bundle inclusions not established for this named tier. | Not established |
Download the scoped plan and feature evidence. Unknown is not the same as unsupported; add-ons are not included in the captured base-plan price.
WHAT IS KEPT, AND FOR HOW LONG?
Logging, field by field.
Denies identifiable VPN logs but describes aggregate connection events and optional support diagnostics.
Provider policy statements · Consumer VPN; website tracking is a separate data path. These are attributed claims, not StealthVPN observations of the service.
DNS queries
Claims no storageDenies DNS-query logs.
Policy section: Service performance data
IP addresses
Claims no storageDenies VPN source-IP logs.
Policy section: Policy introduction; service performance
Session records
Aggregate recordsAggregate connection attempts/successes; denies identifiable timestamps and durations.
Policy section: Connection Attempt; Connection Successful
Bandwidth counters
Not establishedIndividual bandwidth-counter retention not established in this policy review.
Policy section: Non-personal data
App diagnostics
Conditions applyAggregate metrics; optional diagnostics and user-submitted support logs.
Policy section: Non-personal data
Account identity
CollectedContact/account fields and website anti-fraud information.
Policy section: Information related to your account
Payment records
CollectedTransaction/billing records; full card details handled by processors.
Policy section: Account information; policy introduction
Retention & deletion
Not establishedNo fixed duration; service, legal and dispute requirements apply.
Policy section: Data Retention
A no-storage claim applies to the category described. It does not rule out account records, website tracking, payment-processor data or an optional feature. “Not established” means the reviewed source did not settle this field. Read the separate assessments and event record
OPEN-SOURCE PRIVACY INTELLIGENCE
Follow the jurisdiction.
Outside listed 14Reviewed 2026-11-06
- Service operator
- CyberGhost S.R.L.
- Declared jurisdiction
- Romania
- Country-set membership
- Not in the listed Five / Nine / Fourteen country sets
- Ownership / group
- Kape Technologies
- Parent / owner country
- United Kingdom
- Evidence basis
- Provider documents + published country-set research
What the location tells you
Romania is outside the listed Fourteen Eyes set. The Romanian operator, UK parent and server jurisdictions remain separate considerations.
CyberGhost: privacy policy and Romanian operator (opens in a new tab) · ODNI: Five Eyes oversight council (opens in a new tab) · Daniel Byman / CSIS: Improving U.S. Intelligence Sharing with Allies and Partners, January 2025, p. 11 (PDF p. 15) (opens in a new tab)
Look through the ownership
Kape lists CyberGhost, ExpressVPN, PIA and its publishing business among its brands. Shared control is relevant context, not proof of customer-data access.
Kape: group brands, including PIA and ExpressVPN (opens in a new tab) · CyberGhost: privacy policy and Romanian operator (opens in a new tab)
What the provider says it retains
Read the logging categories and retention periods
Denies identifiable VPN logs but describes aggregate connection events and optional support diagnostics.
CyberGhost: privacy policy and Romanian operator (opens in a new tab)
Country grouping is our classification of the declared service jurisdiction. It is not evidence that a VPN shares customer data, or a finding that an unlisted jurisdiction is safe. Provider policy statements are not independently verified here. Read the practical implications
READ THE RECORD AND THE SCOPE
Audits, disclosures & research gaps.
Labels identify the evidence source. A commissioned assessment, a company statement and a missing document establish different things. StealthVPN has not independently tested these systems.
Deloitte assurance: provider summary obtained
Q4 2025 report; checked November 6, 2026
CyberGhost describes a third Deloitte Audit Romania assurance engagement under ISAE 3000 (revised), covering VPN configuration, management systems and token-based Dedicated IP.
Limits: The underlying assessor report has not been obtained here. This is CyberGhost’s account of assurance, not our verification of the assessor’s full scope or results.
CyberGhost: Q4 2025 transparency report and Deloitte assurance summary (opens in a new tab)
Legal requests: a self-reported outcome
October–December 2025
The provider lists police requests of one in October, zero in November and one in December, and reports that no user data was handed over.
Limits: No corresponding court records were obtained. A self-reported quarter does not establish the absence of all historical disclosures.
CyberGhost: Q4 2025 transparency report and Deloitte assurance summary (opens in a new tab)
THE SOURCE, THE SCOPE, THE LIMIT
Read the privacy evidence.
An on-site evidence view, not a privacy score. Policy claims, commissioned assessments and historical events answer different questions. Event dates below retain their documented precision; a year or month is not an exact day.
Provider statementCourt recordThird-party researchCommissioned assessmentCompany filingUnresolved
Labels identify the source, not a security rating or independent StealthVPN testing. Read the document scope and limits.
Logging and retained records
Denies identifiable VPN logs but describes aggregate connection events and optional support diagnostics.
CyberGhost privacy policy (opens in a new tab) Field-by-field breakdown
Who operates and controls the service?
CyberGhost S.R.L. · Romania
Kape Technologies
Kape lists CyberGhost, ExpressVPN, PIA and its publishing business among its brands. Shared control is relevant context, not proof of customer-data access.
CyberGhost: privacy policy and Romanian operator (opens in a new tab) · Kape: group brands, including PIA and ExpressVPN (opens in a new tab)
Assessments and their boundaries
CyberGhost account of Deloitte assurance
Period: Provider report covering Q4 2025
Commissioned by / engagement: CyberGhost describes a Deloitte engagement; underlying engagement terms not inspected here
Scope: The provider’s transparency report describes its third Deloitte no-logs assurance engagement.
Reported result: An attributed provider account; this matrix does not present it as an independently inspected assurance report.
Limits: Full assessor scope, sample, qualifications and report were not reviewed here. The police-request tables on this source disagree; no aggregate request total is inferred.
Transparency report: Deloitte spotlight; compare the two police-request tables.
CyberGhost: Q4 2025 transparency report and Deloitte assurance summary (opens in a new tab)
Documented event timeline
Newest event first. Responses are attributed; an announced remediation is not independently verified by StealthVPN. A related product or former owner is identified in the event scope.
- Ownership & people
Kape: controlling shareholder history and review publishing
Scope: Ownership and potential commercial conflicts
Record or attributed account
Company filingProvider statementUnikmind’s February 2023 offer announcement identifies it as wholly owned by Teddy Sagi and already holding about 54.8% of Kape at that date. Kape’s current brand page lists ExpressVPN, PIA and content publisher Webselenese.
Data outcome and relevance
Company filingProvider statementThis establishes dated ownership and a shared commercial group. It does not show that the owner receives VPN user records.
Response / reported subsequent action
Provider statementKape describes Webselenese as a publisher of privacy and security comparison content. Shared ownership is relevant when evaluating commercial incentives.
Unresolved / not establishedOpen the case and document locatorsThe 2023 percentage is historical, not a current cap table. This entry makes no personal-misconduct allegation against Sagi and does not infer that any particular review was manipulated. Current beneficial-ownership records and editorial controls need separate investigation.
- Ownership & people
Kape’s Crossrider history and the adware concern
Scope: Historical parent-company business; current VPN brands are distinct
Record or attributed account
Company filingThird-party researchA March 2018 regulatory announcement documents Crossrider’s renaming as Kape. Separately, Malwarebytes identifies PUP.Optional.Crossrider as adware and describes bundling and browser-hijacking behavior.
Data outcome and relevance
Company filingThird-party researchThese sources establish historical corporate and software concerns, not that current ExpressVPN or PIA apps contain that adware or sell VPN traffic.
Response / reported subsequent action
Company filingProvider statementThe 2018 announcement describes a strategic shift toward consumer security and privacy. Kape now lists ExpressVPN and PIA among its brands.
Unresolved / not establishedOpen the case and document locatorsThe detection classification concerns particular software; the name-change filing concerns a company. They do not establish that every platform customer behaved alike or that Kape intentionally authored every unwanted payload. Current VPN systems require their own evidence.
No country label or corporate association is a finding of guilt, safety or customer-data access. Jurisdiction context · Investigation method.
BEFORE YOU CHOOSE
Details worth a closer look.
The selected long offer includes four bonus months; renewal is annual.
CyberGhost shares Kape ownership with ExpressVPN and PIA.
Refund window: 45 days on longer plans; 14 days on the monthly plan. Terms apply.
Provider documentationMORE PERSPECTIVES
Read the published reviews.
These reviews belong to their publishers. Their methods, commercial relationships and testing dates differ. Our provisional editorial metascore groups eligible overall ratings by publisher family; all original summaries and source caveats remain below.
3 review publications represent 3 source families for this service. The editorial metascore shows eligible opinions and family weighting; it does not rate this exact subscription or certify security. Inspect this provider’s speed evidence
- AV-TEST · 2025 comparative report (opens in a new tab) — Commissioned laboratory report; Commissioner: Kaspersky, which also has products in the comparison.
Top10VPN · Top10VPN family
CyberGhost review (paid service)
Overall editorial rating · paid service: 8.3 / 10REVIEW IN BRIEF
Top10VPN considers CyberGhost a dependable, inexpensive all-rounder, with useful streaming support and broad server coverage.
Main caveat: It reports uneven long-distance speeds, a dated interface and missing advanced options such as multi-hop.
Our paraphrase · source checked 2026-11-07
Coverage: Paid service; exact subscription not captured.
Article updated: 2026-10-14
Test period: not captured. Article updates may cover only part of a review.
Manually checked 2026-11-06. Affiliate-supported. The publisher’s methods describe self-funding/no paid reviews; its terms also allow commercial influence on ordering and scores. This verdict is not treated as an independent extra vote or a StealthVPN test.
TechRadar · Future family
CyberGhost VPN review
Overall editorial rating: 3.9 / 5REVIEW IN BRIEF
TechRadar praises CyberGhost’s streaming-oriented servers, fast test results and inexpensive long-term subscriptions.
Main caveat: It finds the feature set less innovative, the device limit awkward and port forwarding unavailable.
Our paraphrase · source checked 2026-11-06
Coverage: See publisher for tested plan.
Article updated: 2026-02-26; originally published 2022-10-24
Test period: not captured. Article updates may cover only part of a review.
Metadata collected 2026-11-06. Affiliate-funded publisher. Manually checked metadata; publisher update dates do not date all tests. Free and paid scores remain distinct.
PCWorld · PCWorld family
Tested: I'm blown away by CyberGhost VPN's vast server network
Overall editorial rating: 4 / 5REVIEW IN BRIEF
PCWorld highlights CyberGhost’s large network, externally checked no-logs policy and generous refund window.
Main caveat: It reports variable server performance and fewer extra security features than some competitors.
Our paraphrase · source checked 2026-11-06
Coverage: Paid service.
Article updated: 2026-01-22
Test period: not captured. Article updates may cover only part of a review.
Metadata collected 2026-11-06. Publisher may earn affiliate commissions. Original methods and dates apply; StealthVPN has not rerun these tests.