IVPN has run from Gibraltar under IVPN Limited since 2009, and the choice of jurisdiction sets the tone for the rest of the product. Gibraltar carries no mandatory data-retention statute and sits outside the Five Eyes intelligence-sharing framework, which removes a class of legal pressure that operators in the United States or United Kingdom cannot avoid.
Sign-up returns a randomly generated 15-character account ID with no email field, and payment can flow through Monero, Bitcoin, or physical cash mailed to Gibraltar. The audit record is one of the longer ones in the category. Cure53 has reviewed IVPN annually since 2019, and the sixth audit, finished in March 2024 over eight working days, covered the web UI, the backend, API endpoints, and the underlying infrastructure.
Two low-severity vulnerabilities and two informational issues were logged, all remediated before publication. We treat that combination of frequency and scope as more useful than a single one-off pentest, because it shows whether issues stay fixed across releases. The client estate is open source under GPLv3, with code for Windows, macOS, iOS, Android, and Linux published on GitHub.
Servers run from RAM in owner-operated racks, and IVPN ships a custom daemon that prunes inactive WireGuard peers within minutes to address the protocol's well-known IP-persistence flaw. The company also closed its affiliate program in 2018 in protest of paid-review culture and fraudulent coupon codes, which is one reason the brand is harder to find in glossy review lists than its technical record suggests.
The trade-offs are clear once you read past the privacy story. The fleet is small. Cloudwards counts 48 locations across 35 countries, while TechRadar puts it at 77 servers across 44 locations, against the 3,000-plus that ExpressVPN advertises.
Streaming coverage is patchy: BBC iPlayer fails across multiple servers, Disney+ and Max remain blocked, and Cloudwards accessed only four of six tested platforms. Pricing on the Pro plan reaches 10 dollars a month, and AllAboutCookies measured an average 41% download-speed reduction against baseline.
The Standard plan limits users to two simultaneous connections; the seven-device cap and multi-hop routing sit behind the Pro tier. IVPN does not operate inside China, so users behind the Great Firewall need a different provider. Trustpilot sits at 3.4 out of 5 from a small sample of around 22 reviews, with recurring complaints about streaming and pricing.
We think IVPN fits buyers who weigh audit cadence and open-source clients above streaming convenience and who can absorb a higher monthly cost for the privacy posture.