TunnelBear claimed to fix the high-risk vulnerability immediately. In 2020, there were “two low, two medium and one high-risk vulnerability” identified. The audit concluded that TunnelBear is “a clear frontrunner among its VPN competitors when it comes to security.” In 2019, Cure53 discovered 12 vulnerabilities of varying severity, and helped TunnelBear fix them and future-proof them. These audits looked into TunnelBear’s apps, code, and infrastructure. TunnelBear also commissioned cybersecurity company Cure53 to carry out four yearly independent security audits since 2017. The article concluded the VPN has no privacy flaws and doesn’t collect any unnecessary telemetry data. In January 2017, Byte 255 looked into TunnelBear’s code and published the results on Hacker Noon. To prove its commitment to transparency and user safety, TunnelBear has undergone several independent security audits. Independent audits prove TunnelBear is safe While TunnelBear can be subpoenaed by Canadian and US authorities, its robust logging policy and regular transparency reports prove it’s still a trustworthy and private VPN. Moreover, both jurisdictions are known to prosecute for minor copyright violations, which is important information if you want to use a VPN for torrenting. While TunnelBear’s headquarters are in Toronto, its new ownership means that it’s also subject to US data laws.īoth the US and Canada form an integral part of the Five-Eyes data-sharing alliance, an organization designed for powerful nations to collect and share surveillance intelligence. “Use your information according to Canada’s laws, regardless of which country you are located in.” Subject to Canada and US data laws The VPN company still operates a separate team within McAfee, meaning the same employees continue to work on the VPN post-acquisition.Īs the privacy policy states, by using TunnelBear you are authorizing the company to: It was subsequently acquired by antivirus software company McAfee in early 2018. TunnelBear was established in 2011 in Canada by Daniel Kaldor and Ryan Dochuk. There have been no known incidents of server breaches or logging scandals associated with TunnelBear. Worryingly, TunnelBear admits to confirming a user’s email address to authorities, although it has never handed over usage information. The company also issues an annual transparency report detailing any government requests for user data.

There are no logs that reveal which websites you’ve visited. The only personally identifiable information TunnelBear logs is your email address, to prove you have an account.

Tunnelbear premium free download