A VPN service is only as good as the security it offers. This is why third-party verifications are essential. Having cybersecurity experts inspect and review our app is a great way to ensure it can withstand all manner of digital threats.
With that said, our newest Android app version v8.16.0.2831 was checked by the App Defence Alliance, and successfully passed MASA verifications. Here’s what this means.
CyberGhost VPN Passed MASA Verifications
On December 4th, 2023, the CyberGhost Android app underwent a full security audit. We submitted our app for review to ensure it meets MASA framework standards. You might not have heard of MASA, but it is the industry standard for mobile app security.
The framework is based on the Mobile Application Security Verification Standard (MASVS), established by the Open Web Application Security Project (OWASP). It aims to give Android users a helpful hand in determining which Google Play Store apps are safe to use.
What Does This Security Assessment Look At?
A MASA assessment scrutinizes 6 areas of an app. For CyberGhost VPN, an overview included:
- Code quality: Does the app have good quality code free of known vulnerabilities and is signed with a valid certificate?
- Cryptography: Are secure encryption standards used and cryptographic keys not reused?
- Authentication: Once you log out, does the app secure your session and delete all relevant data?
- Network communication: Are trusted certificates used and communications encrypted according to current guidelines?
- Platform requirements: Does the app request unnecessary permissions or export data to third parties?
- App storage: Does the app have security settings to protect user privacy and ensure no sensitive data is stored?
CyberGhost VPN has successfully passed all six areas, and the full report is available on App Defense Alliance’s website. You will see a verification badge in the Google Play Store which confirms the CyberGhost Android app adheres to the best security practices.
Every app on the Google Play Store has a Data safety section at the bottom of the listing. This is where you can find the badge confirming our app was assessed.
Why MASA Assessments Are a Step in the Right Direction
Google announced it will introduce new measures to showcase apps that pass modern security standards, and make it easier for consumers to protect their data and prevent cyberthreats. Google will mark apps that successfully pass MASA assessments with a security badge in the Play Store, allowing users to make better informed decisions about the apps they download and use.
This decision comes as a much needed change, as more and more malicious actors masquerade malware as Android apps. The Google Play Store has long been a target for cybercriminals due to its popularity and open-source platform.
This seems to be a step in the right direction to help Android users weed out unsecure apps and secure their digital footprint.
We’re Committed to Transparency
Submitting our Android app for an exhaustive security review is just one way we ensure we offer the best service to our Ghosties. We also invited professionals to inspect our server network in an independent audit, we collaborate with cybersecurity specialists around the world through our Bug Bounty Program, and we publish quarterly Transparency Reports, where everyone can read up on the steps we take to ensure state-of-the-art data protection.
We also operate under a strict No Logs policy, which means we built our apps specifically to prevent data retention. This wouldn’t be possible without us implementing robust security settings, modern VPN protocols, and good cryptographic standards. We built our service to help you secure your data, enhance your online anonymity, and surf the world wide web safely.
We’re open to future assessments and security reviews as we’ll continue building our apps to adapt to the age of digital surveillance and data-mining. We’re committed to giving you the tools you need to stay safe and secure online.
Leave a comment