British Virgin Islands; 13 AUGUST, 2024—ExpressVPN today announced that cybersecurity firm Cure53 has completed its second assessment of its browser extension for Chrome and Firefox. The audit, which took place in June 2024, reaffirms the security of its browser extension.
Cure53’s findings were very positive. The report commends ExpressVPN’s browser extension for its “well-implemented security measures, which protect against the majority of severe threats.”
“The overall number of findings made during this engagement was very small, and this can certainly be interpreted as a positive sign in regards to the security of the inspected VPN browser extension,” Cure53 wrote in its report. “All in all, Cure53 would like to congratulate the ExpressVPN team on their excellent work.”
The report identified only two issues, one of “medium” severity and one miscellaneous. Both were classified as having low exploitation potential and have since been addressed. The fixes were verified by Cure53 again in a re-test conducted in July 2024.
The report concludes that the extension’s design prioritizes a minimal attack surface, which reduces potential avenues for exploitation. It also notes that “the way the development team has adhered to best practices for browser extension development is commendable. This focus on secure coding principles, coupled with the implementation of robust input validation measures, significantly reduces the likelihood of successful attacks.”
This audit further solidifies ExpressVPN’s position as the industry’s most transparent provider, with 19 independent third-party audit reports published to date. This is just one of the many ways ExpressVPN continue to uphold its commitment to transparency and accountability.
Read Cure53’s full audit report.
— ENDS —
About ExpressVPN
Since 2009, ExpressVPN has empowered millions of users to take control of their internet experience. The company’s award-winning consumer VPN service is backed by its open-source VPN protocol Lightway, delivering user privacy in just a few clicks. ExpressVPN’s Keys password manager and Aircove router make digital privacy and security easy and accessible for all. ExpressVPN’s products have been extensively vetted by third-party experts, including PwC, Cure53, KPMG, and others.
ExpressVPN has been part of Kape Technologies since 2021. To learn more about ExpressVPN’s industry-leading privacy and security solutions, visit www.expressvpn.com.
