Self-hosted network security
WireGuard privacy rating
VPN protocol and implementation built on modern cryptography such as Curve25519 and ChaCha20-Poly1305, included in the Linux kernel and available as apps for other platforms.
Summary
WireGuard scores 90 out of 100 (grade A) on the self-hosted network security criteria. It meets 3 of 4 criteria: open source, no trackers or telemetry and no ads or data sales. It partly meets independent audit.
Score 90 out of 100. How scoring works
Criteria
-
Yes
Open source Weight 3 of 3
Is all the source code needed to run the product public?
GPL-2.0 for the kernel module and tools; the other implementations and apps use MIT or Apache-2.0.
-
Yes
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
Exodus finds no trackers in the Android app, there is no telemetry in the source code, and the website loads no trackers.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Free software funded by donations and sponsors, with no ads.
-
Partial
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
Independent academic formal proofs of the protocol and a verified Curve25519 implementation are published, but they are older than three years and no recent code audit report is public.