CyberGhost review

The short answer

CyberGhost is a paid VPN run by CyberGhost S.R.L., a Romanian company owned by Kape Technologies. Deloitte has checked its no-logs claim three times, and we found no reported breach. The evidence is thinner than for ExpressVPN, its sister brand: the audits cover server setup and policy, not app code, and no court case has tested the claim. That puts it a step below the best-documented providers.

Tunnelcheck hasn't tested CyberGhost. This page draws on CyberGhost's own pages, Deloitte's conclusions as published by CyberGhost, and press coverage. See how we review.

Who owns CyberGhost and where is it based?

CyberGhost's terms of service are a contract with CyberGhost S.R.L., and its copyright notices go to a Romanian (.ro) address. Reporting describes the company as based in Bucharest. The terms say English law governs most disputes. Sources disagree on the founding year, so we haven't printed one.

In 2017 CyberGhost was bought by Crossrider, a company controlled by Teddy Sagi. Crossrider's platform for building browser extensions had been widely misused by adware and malware makers. It left that business in 2016, renamed itself Kape Technologies in 2018, and went on to buy ZenMate, Private Internet Access and ExpressVPN. Kape was taken private by Sagi's company Unikmind in 2023. Kape also owns VPN review websites, which is one reason we don't rely on review sites for facts. More in who owns your VPN.

Does CyberGhost keep logs? What the audits say

CyberGhost says it doesn't log what you do through the VPN. Read our no-logs explainer for what that should and shouldn't cover. Here's what outside checks found.

All three followed ISAE 3000 (Revised), the international standard for assurance on non-financial claims. TechRadar reported that the 2024 check confirmed CyberGhost's privacy and no-logs setup worked as described. French site Clubic reported that the 2025 check found nothing calling into question the match between the observed configuration and CyberGhost's description of its policy. That's the careful wording auditors use: it means the auditors found no contradiction, not that they proved nothing could ever be logged.

CyberGhost also publishes quarterly transparency reports listing legal requests and how it answered them. These are the company's own figures, not audited ones.

Security features and protocols

CyberGhost's support center lists three protocols, the rule sets that build the encrypted tunnel: WireGuard, OpenVPN and IKEv2. Not every app has all three. The support article lists OpenVPN for Windows, Android, Linux and Android TV or Fire TV, and the macOS help pages list IKEv2 and WireGuard. Our WireGuard vs OpenVPN guide explains the difference.

CyberGhost's guides say its apps include an automatic kill switch, which cuts your internet if the VPN connection drops, and that it's on by default. See our kill switch guide and run a leak test after installing.

CyberGhost's track record

We found no reputable report of a breach of CyberGhost's servers or of user data being handed over. We also found no court case where its no-logs claim was tested, unlike its sister brands PIA and ExpressVPN. Ownership history is the main background issue. Kape's adware-era past as Crossrider is well documented, though it predates the VPN business. Nothing in the public record ties that history to CyberGhost user data.

Streaming and torrenting with CyberGhost

Torrenting. CyberGhost runs P2P-optimized servers in selected locations. On Windows they sit under a "For torrenting" tab, on macOS under "For downloading". Its support pages say P2P isn't offered on every server and that some countries don't allow it. They also advise connecting before opening your torrent client and checking for leaks. Its terms forbid distributing copyrighted content you don't have rights to, and rights holders can complain to CyberGhost. A VPN hides your downloads from your internet provider but doesn't make infringement legal; see is torrenting illegal.

Streaming. CyberGhost markets servers for streaming. Watching another country's catalog usually breaks the streaming service's terms, and services block VPN addresses, so results change. See why streaming services block VPNs.

Apps and devices

CyberGhost's purchase page says one subscription allows 7 VPN connections at once. Its terms, oddly, refer to an "unlimited simultaneous devices" feature and say the company may limit use if it spots abuse such as reselling. We've gone with the purchase page's figure of seven; check the app or ask support if this matters to you. Apps cover Windows, macOS, Linux, iOS, Android and Android TV or Fire TV. A VPN on your router counts as one connection and can cover devices without an app.

Price and refund (checked 2026-11-13)

The page had some inconsistent labels (some cards said "2 Years + 2 Months" or "+ 3 Months" at the same price), and the renewal price for the long plan wasn't clearly shown. CyberGhost's terms give a 45-day full refund on plans of six months or longer and 14 days on one-month plans, for direct purchases only; app store purchases follow the store's rules. Check the official pricing page, and see our checked VPN prices.

What we couldn’t verify

• The device limit. The purchase page says seven connections; the terms mention unlimited devices. We print seven because that’s what the plan page sells.
• The founding year. Sources give dates from 2004 to 2011. We found no primary record that settles it.
• Deloitte’s full wording. The reports are downloads from CyberGhost; we’ve relied on CyberGhost’s summary and on TechRadar and Clubic coverage of them.
• App security. We found no third-party penetration test of the apps. If CyberGhost publishes one, we’ll add it.

CyberGhost, PIA and ExpressVPN share an owner but not an evidence record. ExpressVPN has app and protocol audits; PIA has open code and court tests; CyberGhost has its Deloitte reports. Weigh each on its own file, not on the group’s reputation.

Who CyberGhost suits, and who should look elsewhere

• Suits: people who want labeled torrent servers, a long refund window and a low first-term price.
• Suits: users happy with repeated no-logs checks by a Big Four firm.
• Look elsewhere if you need more than seven devices or published app security audits. Surfshark and NordVPN have both.
• Look elsewhere if you'd rather avoid Kape-owned brands.

See also CyberGhost vs Private Internet Access.