ExpressVPN

Its own Lightway protocol on every app, KPMG no-logs assurance, and a 2017 Turkish server seizure that turned up no logs.

Facts checked November 2026. Sources are listed at the end.

Company
Express Technologies Ltd. (owned by Kape Technologies)
Based in
British Virgin Islands
Latest audit of note
KPMG no-logs assurance, 2025
Free plan
No
Money-back window
30 days
Visit ExpressVPN(opens in a new tab)

Who it suits

People who want a long-established mainstream VPN with its own protocol on every platform, including routers, and a 30-day refund.

Less suited to: Anyone who wants WireGuard, or who weighs the ownership history: Kape (formerly Crossrider) and the 2021 Gericke case.

Jurisdiction

Express Technologies Ltd. operates under British Virgin Islands jurisdiction. Its ultimate holding company is Kape Technologies.[1]

Audits

  • KPMG · February 2025 (published June 2025)

    No-logs assurance engagement under ISAE (UK) 3000, checking how ExpressVPN's no-logs controls were designed as of February 28, 2025. KPMG gave reasonable assurance with no issues found. It is a point-in-time check of control design, not of how controls ran over a period.[2]

  • Cure53 · February to March 2026 (report April 2026)

    Penetration test of EventVPN, the free app from ExpressVPN's team. It found one critical issue (Premium could be unlocked with fake transactions), two high (including IPv6 traffic bypassing the VPN on dual-stack networks) and one medium (a kill-switch bypass). Cure53's report says all findings were fixed or mitigated and that it verified the fixes.[3]

Notable incidents and changes

  • 2017

    Turkish authorities seized an ExpressVPN server while investigating the assassination of Russia's ambassador. ExpressVPN said inspecting it yielded no useful information because it keeps no connection logs.[4]

  • 2021

    Kape Technologies, formerly called Crossrider, bought ExpressVPN for about $936 million.[5]

  • 2021

    Daniel Gericke, an ExpressVPN executive hired in 2019, entered a deferred prosecution agreement with the US Justice Department over hacking work he did for the United Arab Emirates before joining. ExpressVPN said he had not admitted guilt and kept him on.[7]

Protocols

Lightway (ExpressVPN's own protocol, on all apps), OpenVPN over UDP or TCP, and IKEv2 in some automatic setups. ExpressVPN does not support WireGuard.[8]

Free plan, refunds and price

No free ExpressVPN plan. Its team separately launched EventVPN, a free, ad-supported app for Apple devices.[9]

30-day money-back guarantee for first-time customers; you ask support for the refund.[10]

Prices change often and depend on plan length, so check ExpressVPN's site for current pricing.

Read the terms on ExpressVPN's own site before you buy.

Visit ExpressVPN(opens in a new tab)

Compare with

Sources (checked November 2026)

  1. ExpressVPN: Privacy policy (updated October 2026)
  2. ExpressVPN: KPMG 2025 no-logs policy audit (June 2025)
  3. Cure53: EventVPN pentest report (2026, PDF)
  4. TorrentFreak: VPN server seized to investigate Russian ambassador's assassination (December 2017)
  5. The Register: ExpressVPN bought by Kape (September 2021)
  6. ExpressVPN: Statement on the deferred prosecution agreement (September 2021)
  7. Euronews / Reuters: ExpressVPN executive among ex-US intelligence operatives fined (September 2021)
  8. ExpressVPN: VPN protocols
  9. Tom's Guide: We tried ExpressVPN's new free VPN, EventVPN (September 2025)
  10. ExpressVPN: Order page