VPNs graded A+ to F, 2026.

A directory of consumer VPN services, each graded A+ to F on what its own pages disclose. The grade weighs a named outside audit first, then the logging policy, who owns the company, how clearly the price and renewal are stated, and the protocols and apps on offer.

Every VPN says it keeps no logs

That sentence costs nothing to write, so on its own it tells you very little. VPN Grader lists consumer VPN services and gives each one a letter grade for how much of that promise it backs up on its own pages: whether an outside firm has examined the servers or the logging setup and is named, whether the logging policy lists what is kept as well as what is not, whether the company says who it is and where it is based, and whether the price you will pay at renewal is printed anywhere.

Each provider gets one listing and one write-up, however many categories it appears in. Features such as a dedicated IP, a double hop or an ad blocker are details inside a listing, not separate entries.

How the directory is organised

There are sixteen categories, and they answer two kinds of question.

The first is what you need the VPN for. Privacy-first VPNs collects the providers with something behind the no-logs line: a named audit, an account you can open without an email address, or routing through more than one server. Free and budget VPNs looks at how a free service pays for itself and at the monthly price on the plan you would actually buy. There are categories for streaming, for gaming, torrenting and speed, for getting past censorship with obfuscated protocols, for travel and dedicated IP addresses, for routers and households with many devices, for smart TVs and streaming sticks, and for VPNs with built-in ad and tracker blocking. Open source gathers the providers that publish their own app code, and browser extensions covers VPN extensions and browsers with a VPN built in, where the difference between a proxy and a full tunnel matters.

The second is the device in your hand. iPhone and iPad, Android, Mac, Windows and Linux each have their own category, because support thins out quickly beyond the first two or three, and a provider only joins one when its own site names an app for that platform.

How a grade is worked out

The grade is a score out of 100 across five things, weighted in the order the site cares about them. A named outside audit of the no-logs policy or the server infrastructure is worth the most, 30 points, and it only counts when the provider's own pages name the firm. The logging policy is worth 20, and the full 20 needs a list of what is kept, not only of what is not. Ownership and jurisdiction are worth 20: the legal entity, its country, and a parent company where there is one. Price transparency is worth 15, which needs the plans, the renewal price or a flat rate, and a refund window. The last 15 go to the protocols and features a provider states plainly, such as WireGuard or OpenVPN, a kill switch, the device limit and apps for the major platforms.

What a provider leaves unsaid counts against it, never for it. A service with no named audit cannot score above a B, however good the rest looks, and an F is kept for a site that publishes almost nothing a buyer could check. Points come off when a provider's own pages contradict each other on a price or a company name, or describe a risk to the user, such as a free tier paid for with advertising.

What a grade does not measure

The grades come from each provider's published pages and the audits they name, not from our own speed runs or streaming tests. A VPN that works well but explains itself poorly will grade lower than its users might expect, and that is deliberate: the grade tells you how much you can check before you pay. Streaming platforms block VPN addresses all the time, so a list of logos on a provider's homepage is a claim about the day it was written, and the write-ups report it as a claim.

Where these services sell

The directory is global. Most providers sell worldwide from their own sites and the app stores, but not all of them, and some apps are missing from the store in countries that restrict VPNs. Each write-up says where the provider says it sells and how it takes payment, including cash or cryptocurrency where that is offered.