Person using a smartphone in the dark, representing mobile VPN use

Is X VPN Safe? Security Review & What You Need to Know (2026)

Amar Ghafir
Written by Amar GhafirUpdated October 5, 2026 · published March 12, 2026 · how we review

Short answer: X-VPN says it completed an independent no-logs audit under the ISAE 3000 (Revised) standard by one of the Big Four firms, and press coverage names Deloitte Singapore. The full report is only shared with verified X-VPN users, so a reader cannot check it publicly. That makes X-VPN better documented than many free VPNs, but not fully verifiable. We did not test its speed, streaming or leak protection.

Checked against the sources listed at the end of this page on October 5, 2026. We did not run our own tests; where a figure comes from a vendor, the text says so.

Who runs X-VPN

X-VPN’s terms of service name LIGHTNINGLINK NETWORKS PTE. LTD., with a registered address in Singapore, as the company that provides the service, and its privacy policy names the same company as the operator. Some third-party sources and older write-ups name Free Connected Limited as the developer. That name does not appear in X-VPN’s terms or privacy policy as we read them, so the company to check is LIGHTNINGLINK NETWORKS. X-VPN says it has offered a free VPN without account registration since 2017.

The audit

X-VPN’s audit page describes an assurance audit under ISAE 3000 (Revised), which it calls an internationally recognized standard for non-financial reporting. The page says the audit looked at X-VPN’s infrastructure, configurations and practices to see whether it stores user activity or connection data, and concluded that X-VPN does not track, collect or store data that could identify a user or locate their activity.

The page names the auditor only as one of the Big Four firms. Coverage on CIO and Macworld reports that it was Deloitte Singapore and that it was completed on February 28, 2026. We have not seen the report. X-VPN says it is available only to users who are logged in to their X-VPN account.

What that does and does not show

  • It shows that X-VPN asked an established auditor to test its no-logs statements against how its systems work.
  • It does not show how the service performs, whether its apps are free of bugs, or how it treats your data in the future.
  • It is hard to verify. A report that only customers can read is weaker than one anyone can download.

Free versus paid

X-VPN offers a free version. Free VPNs have to be paid for somehow, and the usual routes are ads, data sales or limits that push you toward a paid plan. X-VPN says its free service follows the same no-logs policy as its paid plans. Read the privacy policy and check what the free version collects; are free VPNs safe? explains what to look for. Independent of any audit, download the app only from the official site or app store.

What the privacy policy says it collects

According to the privacy policy, X-VPN collects a small amount of account information:

  • an email address and an encrypted (hashed) password
  • order information and payment status
  • anonymized or aggregated statistics and diagnostic information, used for reliability and troubleshooting

It says it does not collect, store or log VPN traffic data or online activity, and lists source and destination IP addresses, browsing activity, DNS queries, downloaded content, VPN server information and connection timestamps. For retention, the policy says account data is kept for the life of the account and anonymized metrics are kept on a rolling basis for no longer than 48 hours. It also names an EU representative, Rickert Rechtsanwaltsgesellschaft mbH in Bonn, Germany. These are X-VPN’s own statements; the audit above is what is meant to test them.

Ads in the free version

The privacy policy says the free version may include ads from AdMob, InMobi, Chartboost and Liftoff, and that the paid, ad-free versions do not enable ad components by default. Those ad networks have their own privacy practices, separate from X-VPN’s no-logs statement about VPN traffic. If that matters to you, read the ad networks’ policies or choose the paid version.

What we could not verify

  • the full audit report
  • speed, streaming access and leak protection, which we did not test
  • ownership of the company beyond what its terms and privacy policy state

A short checklist before you use it

  1. Install the official app only.
  2. After connecting, run a DNS and IP leak test; free DNS leak test tools compared explains how.
  3. Read what the free plan collects in the privacy policy.
  4. Do not use any unfamiliar VPN for banking or work accounts until you are comfortable with it.

If you use it on Windows, X VPN for Windows covers that client. To compare it with audited alternatives, see our VPN comparison.

Frequently asked questions

Is X-VPN legit?

It is an established product with a published audit announcement. The report itself is not public, so some trust is still required.

Does X-VPN keep logs?

X-VPN says it does not track, collect or store data that could identify a user or their activity, and cites the audit.

Is X-VPN free?

It offers a free version and paid plans, according to X-VPN.

Sources

Scroll to Top