CITT

    Scan results

    Mullvad VPN

    Android

    Free the internet from data collection with Mullvad VPN – a service that helps keep your online activity, identity, and location private. Uses WireGuard protocol, no activity logs, and supports anonymous payments with cryptocurrency.

    CITT SCORE
    98
    out of 100
    TRUSTED

    Quick Verdict

    Best for: Anyone who wants strong, no-nonsense VPN protection

    What It Means For You

    The connection is routed through Mullvad's servers with no analytics or advertising SDKs collecting usage data. Google Play handles subscription billing, which means Google processes payment information. No third-party trackers or marketing services receive user activity.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (2)

    Code Security

    2 total
    1 Medium
    1 Low

    Third-Party Services

    Google Play Billing, Google Play Services, Koin, gRPC, OkHttp, Jetpack Compose, AndroidX, Kotlin Coroutines

    Security Strengths

    • ✓Native daemon storage isolates credentials from Android layer
    • ✓Complete backup exclusion prevents cloud credential exposure
    • ✓HTTPS enforcement via platform defaults
    • ✓No analytics, tracking, or advertising SDKs
    • ✓No WebView attack surface
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    vpn
    privacy
    network security
    minimal tracking
    open source focused

    Package

    net.mullvad.mullvadvpn

    Version

    2026.2

    Analysis Date

    Mar 21, 2026

    Classes Analyzed

    7,912

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Very Secure

    Key Findings

    Data Security - 0 findings

    Network Security - 0 findings

    Code Safety - 0 findings

    Privacy - 0 findings

    Privacy Concerns

    What Data is Collected

    Mullvad VPN collects only what is necessary to operate the connection. No analytics services, behavioral trackers, or advertising platforms are embedded in the app. Browsing activity and VPN usage remain private.

    Third-Party Data Sharing

    Google receives data through two integrations: Google Play Billing processes subscription payments, and Google Play Services provides core Android framework functions. No marketing companies, data brokers, or advertising networks receive information about user app usage or browsing behavior.

    Understanding the Scores

    Score CategoryValue
    Security97/100
    Privacy100/100
    Data Security100/100
    Network Security100/100
    Code Safety97/100
    Data Collection100/100
    Data Sharing100/100
    User Control100/100

    Positive Security Features

    • No advertising or analytics SDKs present in the app
    • No behavioral profiling or user tracking of any kind
    • Complete user control over account and connection data
    • Third-party data sharing limited exclusively to payment processing via Google Play

    Areas for Improvement

    • A small number of code safety findings point to implementation areas that could be further hardened in a future update.
    • Subscription billing is handled by Google Play, meaning Google processes payment details under Google's privacy policy rather than Mullvad's.
    • Users who want complete independence from Google services should note that Google Play Services integration is present as part of standard Android distribution.

    About This Analysis

    This scorecard is generated through automated static analysis of the app's code and configuration. Scores reflect the app's security architecture and data handling practices at the time of analysis.

    App Details

    FieldValue
    AppMullvad VPN
    Packagenet.mullvad.mullvadvpn
    Version2026.2
    Analyzed2026-03-21
    PlatformAndroid

    Right of Reply

    Developer not yet contacted