ExpressVPN

Consumer VPN registered in the British Virgin Islands, owned by Kape Technologies since 2021, with repeated third-party audits.

As of 30 August 2026, ExpressVPN starts at $6.67/month. A premium consumer VPN with more published independent audits than almost any competitor, and an ownership and governance history a buyer should read before relying on those audits. Softwr lists it under Cybersecurity. ExpressVPN is made by Kape Technologies, launched in 2009, available on Web, Windows, macOS, iOS.

Visit siteVisit ExpressVPN

Overview

What ExpressVPN does

ExpressVPN is a consumer VPN service operated by Express VPN International Ltd, registered in the British Virgin Islands. It provides applications for Windows, macOS, Linux, iOS and Android, browser extensions, router firmware and its own Aircove router hardware. Connections use Lightway, an in-house protocol that the company open-sourced, alongside OpenVPN and IKEv2. The server estate runs on TrustedServer, a design in which servers hold no hard disks and run entirely from volatile memory, reloading the full software stack on every boot so no state persists between restarts. Kape Technologies acquired the company in 2021; Kape, formerly named Crossrider, also owns CyberGhost, Private Internet Access and Zenmate. The distinguishing feature is the volume of external scrutiny. ExpressVPN has commissioned repeated audits: PwC and KPMG on the no-logging claims and the TrustedServer architecture, and Cure53 on the applications, browser extension and protocol. Lightway's source was released so the protocol itself can be reviewed rather than taken on trust. For a product whose value proposition is a promise the customer has no way to verify, published third-party assurance is the only meaningful substitute for evidence, and few providers have commissioned as much of it or repeated it as often. The buyer is a consumer or household paying at the top of the market for reliability, streaming access and support quality. Two facts complicate the picture and both are matters of public record. Kape's predecessor Crossrider operated a browser extension platform whose technology was widely used to distribute adware, and Kape also owns VPN review publications, so some of the independent-looking rankings a buyer would consult come from the same corporate group. Separately, in 2021 the company's then chief information officer was named in a United States Department of Justice deferred prosecution agreement relating to work for a United Arab Emirates offensive cyber programme, and ExpressVPN kept him in post. None of that invalidates the audits, but a security buyer weighing a trust product should weigh governance alongside the assurance reports.

What people use it for

A buyer who wants the largest available body of published third-party audit evidence behind a no-logging claim
Households wanting whole-network coverage through a router without configuring firmware by hand
Frequent travellers who need connections that survive switching between mobile data and hotel Wi-Fi without dropping
Non-technical users who want the kill switch and DNS handled correctly by default rather than configured

Where it falls short

Concrete and checkable, so you can decide whether any of them matter to you. This is the half of a review a vendor will not write about ExpressVPN.

Ownership passed in 2021 to Kape Technologies, formerly Crossrider, whose earlier browser extension platform was widely used to distribute adware, and Kape also owns VPN review publications, so nominally independent rankings a buyer consults may originate inside the same corporate group.
In 2021 the company's then chief information officer was named in a United States Department of Justice deferred prosecution agreement over work for a foreign government's offensive cyber programme and remained in post, which is a governance fact that sits uncomfortably alongside a product sold entirely on trust.
Audits are point-in-time engagements against an agreed scope, so they establish that specified servers and code matched the stated policy when examined, not that the infrastructure behaves the same way today or under different ownership.
Several country locations are virtual, meaning the hardware physically sits elsewhere, and after India's 2022 directive requiring VPN providers to retain subscriber data ExpressVPN withdrew its Indian servers, so an Indian connection is routed through hardware in another country, which matters if you need genuine in-country routing.
There is no port forwarding and no dedicated IP option, so seeding torrents, hosting a service behind the tunnel and any inbound connection do not work, and users who need those capabilities have to use a different provider.

Cross-shopped

What people choose instead of ExpressVPN

Each pairing was judged by two reviewers asking whether a buyer would genuinely weigh the two against each other. The ones that failed were deleted rather than published.

ExpressVPNvs
1Password
1Password: The world's most-loved password manager
ExpressVPNvs
Bitdefender Total Security
Bitdefender Total Security: The world's #1 rated antivirus
ExpressVPNvs
LastPass
LastPass: Simplify online life with LastPass password manager
ExpressVPNvs
Norton 360
Norton 360: Powerful protection against evolving threats

Pricing

What ExpressVPN costs

Taken from the vendor's own pricing page. Prices move, so check before you buy.

1 Month

$12.95 /mo

8 devices
94 countries
Unlimited bandwidth
24/7 support
30-day guarantee

12 Months

$6.67 /mo

All features
3 months free
Best value

6 Months

$9.99 /mo

All features
30-day guarantee

Capabilities

Features

TrustedServer
Diskless servers running from RAM that reload the entire software stack on every boot, so nothing persists between restarts
Lightway protocol
In-house protocol built for fast connection establishment and network switching, with the source code published for review
Repeated external audits
No-logging and architecture claims examined by PwC and KPMG, and applications and protocol reviewed by Cure53
Network Lock
Kill switch that blocks all traffic if the tunnel drops, enabled by default on desktop clients
Split tunnelling
Per-application routing so chosen apps bypass the tunnel, available on desktop and Android
Aircove router
Own-brand router with the VPN built into the firmware and per-device group routing for the whole household
Threat Manager
Blocks connections to known trackers and malicious domains at the network level on supported platforms
Private DNS
Runs its own DNS resolvers on every server rather than forwarding queries to a third party
Wide platform coverage
First-party apps across desktop, mobile, browsers, routers and smart TV platforms
Eight simultaneous connections
One subscription covers eight devices at once, with a router counting as a single connection

Answered, with sources

Questions people ask

Each answer names the page it came from, so you can check it rather than take our word for it.

Who owns ExpressVPN?

Kape Technologies, which acquired it in 2021. Kape was previously named Crossrider and also owns CyberGhost, Private Internet Access and Zenmate, along with the review sites vpnMentor and Wizcase.

Is the British Virgin Islands jurisdiction actually useful?

It has no mandatory data retention law and is outside the Five, Nine and Fourteen Eyes arrangements, which is the reason it was chosen. It also means limited practical legal recourse for a subscriber, so the jurisdiction protects the company's ability to hold no data rather than protecting you against the company.

Has the no-logs claim been audited?

Yes, repeatedly. PwC and KPMG have examined the no-logging claims and the TrustedServer architecture, and Cure53 has reviewed the applications, extension and protocol. The reports are published.

Can I torrent with it?

Yes, peer-to-peer traffic is permitted on the network, but there is no port forwarding, so you can download but you cannot accept inbound connections and seeding performance suffers as a result.

Does it work in China or similar networks?

Sometimes, using obfuscated connection modes, but no provider can guarantee this and availability changes without warning. Treat it as best effort and have a fallback.

Behind it

Who makes ExpressVPN

Company: Kape Technologies
Based in: British Virgin Islands

Keep looking

Where to go from ExpressVPN

Best Cybersecurity software for

Compare ExpressVPN with

Other Cybersecurity software

Avast One
All-in-one protection for your digital life
Free, then $2.99/mo10 researched notes
Norton 360
Powerful protection against evolving threats
From $36/yr14 researched notes
1Password
The world's most-loved password manager
From $2.99/mo10 researched notes
Bitdefender Total Security
The world's #1 rated antivirus
From $19.99/yr10 researched notes
LastPass
Simplify online life with LastPass password manager
Free plan12 researched notes
NordVPN
Consumer and business VPN from Nord Security, registered in Panama, with repeated third-party no-logs audits.
From $3.99/mo14 researched notes
I
IVPN
Privacy-focused VPN with anonymous account numbers instead of email signup
From $6/mo6 researched notes
M
Mullvad VPN
Privacy-first VPN with one flat price and no email required to sign up
From $5/mo6 researched notes
P
Private Internet Access
Long-standing VPN service with a large server network and flexible multi-year plans
From $11.99/mo6 researched notes
T
TunnelBear
Consumer VPN with a limited free tier and a bear-themed, beginner-friendly app
Free, then $9.99/mo6 researched notes
W
Windscribe
VPN and firewall service with a generous free data tier and a customizable Build-A-Plan option
Free, then $3/mo6 researched notes
ProtonVPN
High-speed Swiss VPN that safeguards your privacy
Free plan7 researched notes
Microsoft Defender
Always-on protection for you and your family's data and devices
From $12/mo10 researched notes
Mimecast
Email and collaboration security
From $4/mo9 researched notes
Motorola Vigilant
Fixed and mobile licence plate recognition with a shared law enforcement plate database
Pricing on request12 researched notes
Nessus
The most trusted vulnerability assessment solution
From $4,790/yr11 researched notes
NordPass
Securely store, manage and autofill passwords
Free plan10 researched notes
Microsoft Sentinel
Cloud-native SIEM and SOAR solution
Free, then $2.46/day12 researched notes

Softwr does not host reviews and shows no star rating for ExpressVPN, because a rating we did not collect is not ours to publish. What is here is the pricing and platform detail from the vendor’s own pages, limitations we could state concretely, and alternatives a reviewer confirmed people weigh against it. Tell us if any of it is wrong.

Best Cybersecurity software alternatives

View all Cybersecurity software