ExpressVPN's New Products Pass Independent Security Audit with Minor Issues
'No critical findings' — ExpressVPN’s new products get thumbs up from third-party security audit in firm's 27th round of independent review
Image: Techradar Nz
ExpressVPN's latest offerings, ExpressMailGuard and Identity Defender, successfully passed a third-party security audit by Cure53, marking the company's 27th independent review. While no critical vulnerabilities were found, several medium-severity issues were identified, emphasizing the importance of ongoing security assessments.
- 01ExpressVPN has undergone 27 independent audits since 2018, demonstrating a strong commitment to security.
- 02The recent audit by Cure53 identified 11 areas of concern in Identity Defender, with 7 classified as medium-security vulnerabilities.
- 03ExpressMailGuard faced 13 findings, with 2 identified as direct security vulnerabilities.
- 04Medium-severity issues included unencrypted data storage and incorrect processing of email addresses, which could lead to potential exploits.
- 05Cure53 recommended regular testing and prompt resolution of identified issues to enhance security.
Advertisement
In-Article Ad
ExpressVPN has successfully completed its 27th independent security audit conducted by the cybersecurity firm Cure53, focusing on its recently launched products: ExpressMailGuard and Identity Defender. The audit revealed no critical vulnerabilities, but it did identify several medium-severity issues. Specifically, Identity Defender had 11 areas of concern, with 7 categorized as security vulnerabilities, including problems with unencrypted data storage. ExpressMailGuard had 13 findings, with 2 being direct vulnerabilities related to email processing. These results underscore the importance of independent audits in maintaining a secure VPN service. Aaron Engel, the Chief Security Officer at ExpressVPN, emphasized the company's commitment to rigorous testing, stating that trust must be earned through transparency and accountability. Cure53's recommendations include addressing the identified issues promptly and conducting regular security assessments to mitigate future risks.
Advertisement
In-Article Ad
The audit results highlight the importance of security in VPN services, affecting users' trust and data protection.
Advertisement
In-Article Ad
Reader Poll
How important do you think independent security audits are for VPN services?
Connecting to poll...
Read the original article
Visit the source for the complete story.