ExpressVPN
Consumer VPN registered in the British Virgin Islands, owned by Kape Technologies since 2021, with repeated third-party audits.
As of 13 November 2026, ExpressVPN starts at $6.67/month. A premium consumer VPN with more published independent audits than almost any competitor, and an ownership and governance history a buyer should read before relying on those audits. Softwr lists it under Cybersecurity. ExpressVPN is made by Kape Technologies, launched in 2009, available on Web, Windows, macOS, iOS.
Overview
What ExpressVPN does
ExpressVPN is a consumer VPN service operated by Express VPN International Ltd, registered in the British Virgin Islands. It provides applications for Windows, macOS, Linux, iOS and Android, browser extensions, router firmware and its own Aircove router hardware. Connections use Lightway, an in-house protocol that the company open-sourced, alongside OpenVPN and IKEv2. The server estate runs on TrustedServer, a design in which servers hold no hard disks and run entirely from volatile memory, reloading the full software stack on every boot so no state persists between restarts. Kape Technologies acquired the company in 2021; Kape, formerly named Crossrider, also owns CyberGhost, Private Internet Access and Zenmate. The distinguishing feature is the volume of external scrutiny. ExpressVPN has commissioned repeated audits: PwC and KPMG on the no-logging claims and the TrustedServer architecture, and Cure53 on the applications, browser extension and protocol. Lightway's source was released so the protocol itself can be reviewed rather than taken on trust. For a product whose value proposition is a promise the customer has no way to verify, published third-party assurance is the only meaningful substitute for evidence, and few providers have commissioned as much of it or repeated it as often. The buyer is a consumer or household paying at the top of the market for reliability, streaming access and support quality. Two facts complicate the picture and both are matters of public record. Kape's predecessor Crossrider operated a browser extension platform whose technology was widely used to distribute adware, and Kape also owns VPN review publications, so some of the independent-looking rankings a buyer would consult come from the same corporate group. Separately, in 2021 the company's then chief information officer was named in a United States Department of Justice deferred prosecution agreement relating to work for a United Arab Emirates offensive cyber programme, and ExpressVPN kept him in post. None of that invalidates the audits, but a security buyer weighing a trust product should weigh governance alongside the assurance reports.
What people use it for
- A buyer who wants the largest available body of published third-party audit evidence behind a no-logging claim
- Households wanting whole-network coverage through a router without configuring firmware by hand
- Frequent travellers who need connections that survive switching between mobile data and hotel Wi-Fi without dropping
- Non-technical users who want the kill switch and DNS handled correctly by default rather than configured
The honest half
Where it falls short
Concrete and checkable, so you can decide whether any of them matter to you. This is the half of a review a vendor will not write about ExpressVPN.
- Ownership passed in 2021 to Kape Technologies, formerly Crossrider, whose earlier browser extension platform was widely used to distribute adware, and Kape also owns VPN review publications, so nominally independent rankings a buyer consults may originate inside the same corporate group.
- In 2021 the company's then chief information officer was named in a United States Department of Justice deferred prosecution agreement over work for a foreign government's offensive cyber programme and remained in post, which is a governance fact that sits uncomfortably alongside a product sold entirely on trust.
- Audits are point-in-time engagements against an agreed scope, so they establish that specified servers and code matched the stated policy when examined, not that the infrastructure behaves the same way today or under different ownership.
- Several country locations are virtual, meaning the hardware physically sits elsewhere, and after India's 2022 directive requiring VPN providers to retain subscriber data ExpressVPN withdrew its Indian servers, so an Indian connection is routed through hardware in another country, which matters if you need genuine in-country routing.
- There is no port forwarding and no dedicated IP option, so seeding torrents, hosting a service behind the tunnel and any inbound connection do not work, and users who need those capabilities have to use a different provider.
Pricing
What ExpressVPN costs
Taken from the vendor's own pricing page. Prices move, so check before you buy.
1 Month
$12.95 /mo
- 8 devices
- 94 countries
- Unlimited bandwidth
- 24/7 support
- 30-day guarantee
12 Months
$6.67 /mo
- All features
- 3 months free
- Best value
6 Months
$9.99 /mo
- All features
- 30-day guarantee
Capabilities
Features
TrustedServer
Diskless servers running from RAM that reload the entire software stack on every boot, so nothing persists between restarts
Lightway protocol
In-house protocol built for fast connection establishment and network switching, with the source code published for review
Repeated external audits
No-logging and architecture claims examined by PwC and KPMG, and applications and protocol reviewed by Cure53
Network Lock
Kill switch that blocks all traffic if the tunnel drops, enabled by default on desktop clients
Split tunnelling
Per-application routing so chosen apps bypass the tunnel, available on desktop and Android
Aircove router
Own-brand router with the VPN built into the firmware and per-device group routing for the whole household
Threat Manager
Blocks connections to known trackers and malicious domains at the network level on supported platforms
Private DNS
Runs its own DNS resolvers on every server rather than forwarding queries to a third party
Wide platform coverage
First-party apps across desktop, mobile, browsers, routers and smart TV platforms
Eight simultaneous connections
One subscription covers eight devices at once, with a router counting as a single connection
Answered, with sources
Questions people ask
Each answer names the page it came from, so you can check it rather than take our word for it.
Who owns ExpressVPN?
Kape Technologies, which acquired it in 2021. Kape was previously named Crossrider and also owns CyberGhost, Private Internet Access and Zenmate, along with the review sites vpnMentor and Wizcase.
Is the British Virgin Islands jurisdiction actually useful?
It has no mandatory data retention law and is outside the Five, Nine and Fourteen Eyes arrangements, which is the reason it was chosen. It also means limited practical legal recourse for a subscriber, so the jurisdiction protects the company's ability to hold no data rather than protecting you against the company.
Has the no-logs claim been audited?
Yes, repeatedly. PwC and KPMG have examined the no-logging claims and the TrustedServer architecture, and Cure53 has reviewed the applications, extension and protocol. The reports are published.
Can I torrent with it?
Yes, peer-to-peer traffic is permitted on the network, but there is no port forwarding, so you can download but you cannot accept inbound connections and seeding performance suffers as a result.
Does it work in China or similar networks?
Sometimes, using obfuscated connection modes, but no provider can guarantee this and availability changes without warning. Treat it as best effort and have a fallback.
Behind it
Who makes ExpressVPN
- Company
- Kape Technologies
- Based in
- British Virgin Islands
Keep looking
Where to go from ExpressVPN
- ExpressVPN alternativesEvery product people weigh against it
- ExpressVPN pricingPlans, floors and what the tiers exclude
- ExpressVPN badgesWhich rules it meets, and the figure behind each
- All Cybersecurity softwareThe full category
- Best Cybersecurity softwareThe shortlist, and how it was cut
Best Cybersecurity software for
Compare ExpressVPN with
- Avast One
- NordVPN
- IVPN
- Mullvad VPN
- Private Internet Access
- TunnelBear
- Windscribe
- ProtonVPN
- Surfshark
- Transcend
- Osano
- Brave Browser
- OWASP ZAP
- Palo Alto Networks Prisma Cloud
- Passbolt
- Ping Identity
- Proofpoint
- Qualys VMDR
Other Cybersecurity software
Consumer and business VPN from Nord Security, registered in Panama, with repeated third-party no-logs audits.
From $3.99/mo10 researched notes- I
IVPN
Privacy-focused VPN with anonymous account numbers instead of email signup
From $6/mo6 researched notes Privacy-first VPN with one flat price and no email required to sign up
From $5/mo6 researched notesLong-standing VPN service with a large server network and flexible multi-year plans
From $11.99/mo6 researched notesConsumer VPN with a limited free tier and a bear-themed, beginner-friendly app
Free, then $9.99/mo6 researched notesVPN and firewall service with a generous free data tier and a customizable Build-A-Plan option
Free, then $3/mo6 researched notesPrivacy request automation, consent and AI governance across internal systems
Pricing on request12 researched notesConsent management and data privacy platform with a published self-serve tier
Free, then $199/mo12 researched notesFree, open-source web application scanner and intercepting proxy, now governed by the Software Security Project.
Free plan10 researched notesOpen-source password manager for teams with self-hosted or cloud deployment
Free, then $4.9/mo9 researched notesEnterprise identity for workforce and customers, with a 5,000 user floor
From $3/mo11 researched notesEmail security and data protection suite from a private company owned by Thoma Bravo, licensed per user with modules sold separately.
From $6/mo10 researched notesCloud-delivered vulnerability management licensed per asset, using scanner appliances and a lightweight agent.
From $3/mo10 researched notes
Softwr does not host reviews and shows no star rating for ExpressVPN, because a rating we did not collect is not ours to publish. What is here is the pricing and platform detail from the vendor’s own pages, limitations we could state concretely, and alternatives a reviewer confirmed people weigh against it. Tell us if any of it is wrong.
More on ExpressVPN
ExpressVPN alternatives
What people switch to, and what they give up
ExpressVPN pricing
Every tier, and where the cost actually lands
Compare ExpressVPN
Put it head to head with anything we hold
ExpressVPN badge
Its rating, and an embed for your own site
Best Cybersecurity software alternatives
Large Chinese video platform that US federal buyers and federal contractors cannot lawfully use
quote
Managed video loss prevention with human auditors for restaurants, convenience stores and retail
quote
Workforce and customer authentication from a certificate authority
Per user per month
Privileged access management, endpoint privilege management and secure remote access
quote
Cloud video surveillance billed per camera per month, where retention length drives the bill more than anything else
Per camera per month
AI video search that runs on cameras you already own, starting near five dollars per camera per month
Per camera per month
Phishing-resistant passwordless authentication with device trust enforced at every login
quote