Skip to content
Independently verified · Quarterly re-audit
EU VETTED

CyberGhost

VERIFIED
VPN · Romania
Founded 2011 · cyberghostvpn.com ↗

Romanian-operated VPN (CyberGhost S.R.L., 2011) under Kape Technologies (UK; ex-Crossrider) → Unikmind/Teddy Sagi (IM) since 2023; listed as a warning.

In short

CyberGhost, in the VPN category, is a European service with Romania as its hosting location and at most minor, transient US exposure under the CLOUD Act.

Assessment notes

CyberGhost is operated by CyberGhost S.R.L. in Bucharest, Romania (founded 2011). But the entire ownership chain sits well outside the EU: parent Kape Technologies plc (UK, AIM-listed until May 2023) acquired CyberGhost for €9.1M in 2017, and on 19 May 2023 Kape was taken private by Unikmind Holdings Limited (an Isle of Man vehicle controlled by Israeli businessman Teddy Sagi) at a ~£1.25-1.51bn valuation, delisting from AIM on 31 May 2023; Kape was originally Crossrider, an Israeli ad-tech / browser-extension business with a documented adware history, and the same Kape group also owns VPN Mentor, a VPN review site (a structural conflict of interest) alongside ExpressVPN, PIA and Zenmate; the product itself has a Deloitte no-logs audit and accepts Bitcoin, but the combination of Romanian-operations + UK Kape parent + Isle-of-Man Unikmind + Crossrider history + review-site conflict means CyberGhost carries no EU-ownership or no-CLOUD-Act-exposure signals: it is listed as a warning rather than a recommendation.

CLOUD ACT
OWNERSHIP
SUB-PROCS
0 none disclosed
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About CyberGhost

CyberGhost is operated by CyberGhost S.R.L., headquartered in Bucharest, Romania, with the product itself dating to 2011. It is included in this directory primarily because of its Romanian operations and historical brand recognition in the privacy-VPN category, but the ownership chain is the editorial story, and it is the reason this listing carries an ownership-watch warning.

The chain runs as follows. In 2017 CyberGhost was acquired for €9.1M by Kape Technologies plc, an AIM-listed UK holding company that has since become the largest VPN consolidator in the consumer market. Kape's portfolio also includes ExpressVPN, Private Internet Access (PIA), Zenmate, and the VPN review site VPN Mentor, the last of which is a structural conflict of interest, since a holding company that owns multiple VPN services should arguably not also own the most-trafficked review/comparison site for that same category. Kape Technologies began life as Crossrider, an Israeli ad-tech and browser-extension business with a well-documented adware history; the rebranding to "Kape Technologies" was a deliberate distancing move. On 19 May 2023 Unikmind Holdings Limited (an Isle of Man-registered vehicle controlled by Israeli businessman Teddy Sagi) secured ~98.5% of Kape's shares in a take-private deal valuing the company at approximately £1.25-1.51bn, and Kape delisted from AIM on 31 May 2023.

Against that backdrop, the product-level signals look reasonable in isolation: an independent Deloitte audit confirmed no user-data storage; AES-256 encryption with kill-switch and DNS-leak protection; NextGen 10-Gbps servers across 100+ countries; 24+ supported platforms; 20+ UI languages; Bitcoin payment via BitPay; a 45-day money-back guarantee. Pricing on the 26-month plan reaches €1.75/month, among the cheapest in the category, which is itself a Kape-pricing pattern.

None of those product strengths offset the structural concerns of the ownership chain for a directory whose value proposition is sovereignty + auditable corporate trust. CyberGhost is therefore listed as a warning rather than a recommendation, with the full Crossrider-Kape-Unikmind-Sagi history surfaced in the rationale, which is exactly the kind of editorial scoop no other EU directory currently makes visible. EU buyers wanting a clean Romanian VPN should look outside the Kape stable; sovereignty buyers should prefer Mullvad, OVPN, ProtonVPN, IVPN or AirVPN.

SUB-PROCESSORS

Sub-processor map · none disclosed

Source ↗
Vendor discloses zero sub-processors. All data processing happens in-house.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-15).
FEATURES

Capability matrix

Countries 100 countries
Simultaneous devices 7 devices
Protocols WireGuard OpenVPN IKEv2
Kill switch Yes
Audited no-logs Yes
Port forwarding No
Platforms iOS macOS Windows Android Linux
INTEGRATION & ACCESS
REST API No
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Pricing & tiers

PAID
from €2/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement. This is recorded as no public DPA (see How we assess).
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    www.cyberghostvpn.com/privacypolicy…
    Open ↗
  • Terms of Service
    www.cyberghostvpn.com/terms…
    Open ↗
ALTERNATIVES

Alternatives in this category

AirVPN
Italy · Founded 2010
EU-SOVEREIGN

Italian hacktivist-founded VPN (Perugia, 2010), no-logs, port forwarding, but no longer serves Italian residents (Piracy Shield).

Public DPA Sub-processors Open source
FROM
€7/mo
CLOUD ACT
NONE
AzireVPN
Sweden · Founded 2012
EU-HOSTED

Swedish privacy VPN (Stockholm, est. 2012): Blind Operator, RAM-only, audited no-logs; acquired by Malwarebytes (US) 7 Nov 2024.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MATERIAL
IVPN
Gibraltar · Founded 2009
EU-BASED

Gibraltar-incorporated VPN (IVPN Limited / ex-Privatus, founded 2009), Cure53-audited no-logs, open-source apps, independent ownership.

Public DPA Sub-processors Open source
FROM
€6/mo
CLOUD ACT
NONE