# Mullvad VPN vs CyberGhost VPN: privacy compared

| Criterion | Mullvad VPN | CyberGhost VPN |
| --- | --- | --- |
| Grade | B (79/100) | D (50/100) |
| Jurisdiction | Sweden (Fourteen Eyes) | Romania |
| Open source | Partial | No |
| No trackers or telemetry | Yes | No |
| No ads or data sales | Yes | Yes |
| Independent audit | Yes | Yes |
| Transparency report | Partial | Yes |
| Tells users about requests | No | No |
| TLS configuration | Yes | Partial |
| Security headers | Yes | No |
| Modern web standards | Not tested yet | Not tested yet |
| Audited no-logs policy | Partial | Yes |
| Anonymous payment | Yes | Partial |
| Open-source apps | Yes | No |
| Modern protocols | Yes | Yes |

**Mullvad VPN.** Mullvad VPN scores 79 out of 100 (grade B) on the VPN providers criteria. It meets 8 of 12 criteria: no trackers or telemetry, no ads or data sales, independent audit, TLS configuration, security headers, anonymous payment, open-source apps and modern protocols. It partly meets open source, transparency report and audited no-logs policy. It does not meet tells users about requests. It is based in Sweden: Fourteen Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.

**CyberGhost VPN.** CyberGhost VPN scores 50 out of 100 (grade D) on the VPN providers criteria. It meets 5 of 12 criteria: no ads or data sales, independent audit, transparency report, audited no-logs policy and modern protocols. It partly meets TLS configuration and anonymous payment. It does not meet open source, no trackers or telemetry, tells users about requests, security headers and open-source apps. It is based in Romania: Not in the Five, Nine or Fourteen Eyes; EU member (GDPR). Automated tests: SSL Labs grade B and Mozilla HTTP Observatory grade C-.

Source: https://privacyratings.com/compare/vpns/mullvad-vpn-vs-cyberghost/