Affiliate links present. Disclosure
CyberGhost
The VPN that would rather ask what you want to do than make you study the server list
Pick CyberGhost if you want the app to do more of the sorting for you instead of turning VPN use into a hobby. Just know the edges before paying: do not count on obfuscation for a network that actively blocks VPN traffic; look elsewhere if multi-hop is a must-have; the client apps are not open source.
Fact-checked and maintained by Softplorer Research
CyberGhost feels built for the person who opens a VPN because they want to watch something, use public Wi-Fi, or just stop thinking about the VPN five seconds later — not because they want a new networking hobby. That easy-going approach has some real support behind it: the app can pick a sensible connection for you, streaming servers are labeled instead of buried in a generic country list, the no-logs setup has independent audit history behind it. The trade-off is that a few advanced corners are either missing or less settled than the friendly interface makes them look. In other words: good neighbour energy, but still check what is actually in the garage before borrowing the drill.
At a glance
Right fit if
- You want a VPN to behave like a light switch: press the obvious button, then forget the wiring exists.
- You stream often and would rather choose a service-labeled server than spend the evening guessing which location might work.
- You use Android and actually want per-app split tunneling instead of sending every app through the same pipe.
Not the right fit if
- You are buying specifically for heavy VPN blocking or censorship. The obfuscation record is conflicting, so this is not the place for a leap of faith.
- You need built-in multi-hop. That extra hop is not hiding behind an advanced menu — it isn't available.
- You want client apps whose source code you can inspect yourself. CyberGhost's apps are closed source.
Score breakdown
Scale reflects category fit and operational confidence — not absolute product quality.
Tap WHY to see the verdict · HOW to see the evidence
Privacy pages are easy to make pretty. The useful question is whether there is anything behind the curtain you can actually inspect.
Privacy claims are easy to make. What matters is whether there are receipts: independent checks, public reports, clear ownership, and real-world evidence where it exists. A promise on a homepage is nice; something you can verify is better. No Logs Audit is only partially confirmed, so the unresolved parts stay unresolved instead of being guessed. Open Source Clients is only partially confirmed, so the unresolved parts stay unresolved instead of being guessed.
What exists
- three Deloitte audits: 2022, January 2024, February 2026 (ISAE 3000 Revised)
- current (2026) report stated as a public direct download — but this contradicts the 2024 page's account-gated claim; treated as true for the current report specifically, with field confidence set to partial to reflect the inconsistency
- Romania — not in any eyes alliance
- Romania: no mandatory VPN data retention legislation — rejected EU Data Retention Directive twice (2009, 2014)
- quarterly report with government requests, DMCA notices, and bug bounty results
- crypto accepted
What's missing
- roughly biennial cadence (2022, 2024, 2026), not annual — official pages label these the 'second' and 'third' audits with ~2-year gaps between them
- no documented court or law enforcement test of no-logs policy
- all client apps closed source
- Kape Technologies (formerly Crossrider) associated with adware distribution prior to 2018 rebrand
- Kape operates ExpressVPN and Private Internet Access alongside CyberGhost — three currently active sibling VPN brands, two of which Softplorer reviews separately (ZenMate, a former fourth brand, was folded into CyberGhost in 2023 and is no longer active)
- no warrant canary published — quarterly transparency report is the only disclosure mechanism
- no physical cash option
Unresolved
- an independent app-code audit was not established by the checked source set; absence is not treated as a confirmed negative — unresolved
Security features are tools in a drawer: the impressive count matters less than whether the right tool is there when something goes wrong.
Here the score counts protections that are actually confirmed, then checks the awkward gaps that only show up when something goes wrong. It is less 'how many switches are in the app?' and more 'which ones matter when the Wi-Fi drops at the worst possible moment?' Kill Switch is only partially confirmed, so the unresolved parts stay unresolved instead of being guessed. Obfuscation Support is only partially confirmed, so the unresolved parts stay unresolved instead of being guessed.
What exists
- WireGuard — default on most platforms
- OpenVPN UDP and TCP
- system-level kill switch on Windows, macOS, Android, and iOS, per one independent review — not yet confirmed in official CyberGhost documentation
- reported as always-on by default on macOS/iOS/Android (cannot be disabled); Windows allows manual toggle off — per the same single independent review
- independent review describes kill switch as functioning across all four platforms including iOS
- own DNS servers
- IPv6 leak protection built in
What's missing
- no DNS-level ad or malware blocking
- no source, old or new, documents automatic DPI-resistant obfuscation via Smart Rules
- no multi-hop routing
Unresolved
- The checked protocol list does not by itself prove the absence of an obfuscation capability; this negative is not scored — unresolved
- current official page claims obfuscation on selected servers; prior evidence pass and independent reviews found none — unresolved contradiction — unresolved
Streaming support is a moving target. Today's green light can turn red after a service changes its blocking, so treat this like a weather report, not a wedding vow.
For streaming, we only give credit for what can be verified now. One successful Saturday night does not become a forever promise, because streaming services change the locks whenever they feel like it. Platform Unblocking is only partially confirmed, so the unresolved parts stay unresolved instead of being guessed.
What exists
- platform-labeled streaming servers in app
- labeled by platform and region — Netflix US, BBC iPlayer, etc
- dedicated Netflix servers by region
- Disney+, Prime, BBC iPlayer labeled servers
What's missing
- labeled servers cover popular regions — smaller markets and niche platforms not included
Unresolved
- Absence of a published permanent guarantee is not scored as a confirmed negative — unresolved
VPN speed is not one horsepower number. Your protocol, route, server, and location all get a vote.
This score is not built from one heroic speed-test screenshot. It looks at the pieces that can affect day-to-day performance and keeps anything unverified out of the victory speech.
What exists
- WireGuard default on major platforms
- RAM-only confirmed on official servers page
- NoSpy servers at CyberGhost HQ Romania — directly owned and managed
What's missing
- WireGuard implementation not covered by Deloitte audit scope
Unresolved
- Server Fleet — not reliably verified right now
A VPN can be brilliant underneath and still make you hunt through Settings like you're looking for the fuse box in someone else's house.
For app experience, the useful question starts after installation: can you connect quickly, find the useful controls, and understand what a switch does without opening a support article in another tab? Connection Ux is only partially confirmed, so the unresolved parts stay unresolved instead of being guessed.
What exists
- Windows, macOS
- iOS, Android
- Android TV, Fire TV
- Chrome and Firefox
- true app-based split tunneling on Android only
- Best Location auto-connect
What's missing
- No native CyberGhost VPN app for Apple TV; official support documents Apple TV via Smart DNS
- official Linux client is command-line only; no point-and-click GUI app is documented
- not available on macOS or iOS; Windows has a weaker URL-based 'Exceptions' feature, not equivalent split tunneling
- interface includes multiple server category views and Smart Rules
This is the boring category that becomes important the second your laptop has the feature and your phone does not.
Here we check where the important features really work, device by device. 'Supported' on the homepage is not much comfort if the exact button you need vanishes when you move from your laptop to your phone.
What exists
- Chrome and Firefox
- OpenVPN and WireGuard router guides published
What's missing
- capped, not unlimited
- proxy-only — browser traffic, not system VPN
Unresolved
- No native-router-firmware negative is scored from absence in the checked documentation — unresolved
The number on the signup button is the first date, not the marriage. Renewal, refunds, and what disappears after the trial period matter later.
For value, look past the shiny first price. Renewal terms, refunds, free-plan or trial limits, and what you actually keep after the honeymoon period matter more than a giant discount badge. Free Tier is only partially confirmed, so the unresolved parts stay unresolved instead of being guessed.
What exists
- all plans and prices listed
- no undisclosed charges
- monthly plan available
- a dedicated official trial page describes free trials on desktop and mobile, though a separate official page denies any free trial exists — genuine contradiction, not resolved either way
- money-back guarantee available, with the window depending on plan length
- tiered money-back window by plan length — exact day counts evergreen-excluded
What's missing
- renewal rate higher than introductory — disclosed at checkout
- monthly plan more expensive than annual per-month rate
- no permanently free plan
- cancellation is self-service, but a refund itself requires a separate support contact — canceling alone doesn't trigger a refund
- App Store/iTunes purchases excluded — refunds go through Apple's own process at their discretion, confirmed on CyberGhost's own money-back guarantee page
Uptime is hard to verify from the outside, so a quiet week on the internet is not treated as proof. Documented infrastructure and real incident handling matter more.
This is the category where guessing gets you into trouble. If there is no solid uptime or incident evidence, it stays unresolved instead of getting a gold star because nobody complained loudly this week.
What exists
- entire fleet RAM-only — confirmed in Q4 2025 Transparency Report and Deloitte 2025 audit
- publicly confirmed in quarterly transparency reports and Deloitte audit scope
Unresolved
- Server Fleet Stability — not reliably verified right now
- Incident Communication — not reliably verified right now
Trade-offs
- Obfuscation remains unresolved because the current official claim conflicts with earlier hands-on findings. Unknown stays unknown — it does not become a feature because the marketing line sounds confident.
- There is no built-in multi-hop route. If two VPN hops are part of your threat model, CyberGhost is the wrong toolbox for that job.
- Introductory and renewal pricing differ. The first bill is the hello; the renewal line is the relationship.
When it breaks
- The browser extension only covers browser traffic. Proxy-only — browser traffic, not system VPN. Think umbrella over one window, not a roof over the whole house.
- Split tunneling is one of those features that looks universal until you change devices. Not available on macOS or iOS; Windows has a weaker URL-based 'Exceptions' feature, not equivalent split tunneling. Your laptop and phone may get very different menus.
Hidden trade-offs
- The signup price and renewal price are not the same thing. The discount is the first date; future-you gets the regular relationship, so read the renewal line before forgetting about it.
- The trial story is messier than it should be: current official CyberGhost pages conflict. Treat the checkout terms you actually see as the source of truth, not a remembered blog post.
- CyberGhost provides a 14-day refund window for one-month plans and 45 days for plans of six months or longer; App Store and iTunes purchases follow Apple's refund terms. Refund eligibility also depends on where you bought it, so cancelling and refunding should not be treated as the same button.
- Corporate ownership is not invisible here. Kape operates ExpressVPN and Private Internet Access alongside CyberGhost — three currently active sibling VPN brands, two of which Softplorer reviews separately (ZenMate, a former fourth brand, was folded into CyberGhost in 2023 and is no longer active). If you are comparing brands partly for ownership diversity, keep that family tree in view.
Sources
Building a complete privacy stack?
A VPN handles network-level encryption. Password managers and antivirus cover the gaps it can't.
Quick comparisons
© 2026 Softplorer