# OpenVPN privacy rating

Open-source VPN daemon that uses TLS for key exchange and runs over UDP or TCP, widely used for self-hosted site-to-site and remote-access VPNs.

## Summary

OpenVPN scores 60 out of 100 (grade C) on the self-hosted network security criteria. It meets 2 of 4 criteria: open source and no ads or data sales. It partly meets independent audit. It does not meet no trackers or telemetry. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

- Website: https://openvpn.net/community/
- Source code: https://github.com/OpenVPN/openvpn
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Windows, macOS, Linux
- Home page trackers: Google Tag Manager, Microsoft Clarity
- Category: [Self-hosted network security](https://privacyratings.com/self-hosted-network-security/)
- Grade: C (60/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | GPL-2.0. | https://github.com/OpenVPN/openvpn/blob/master/COPYING |
| No trackers or telemetry | No | The website loads Google Analytics, Microsoft Clarity, HubSpot and LinkedIn trackers. | https://openvpn.net/privacy-policy/ |
| No ads or data sales | Yes | Free community software supported by OpenVPN Inc.'s paid business products, with no ads in the software. | https://openvpn.net/access-server/pricing/ |
| Independent audit | Partial | Full Quarkslab report on OpenVPN 2.4.0, older than three years. | https://ostif.org/wp-content/uploads/2017/05/OpenVPN1.2final.pdf |

Source: https://privacyratings.com/self-hosted-network-security/openvpn/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/self-hosted-network-security/openvpn.md