Who owns your VPN? VPN owners and parent companies

A VPN subscription is a contract with a specific firm: that firm runs the service, can see the traffic passing through its servers and answers to one country's laws. The table on this page ties each of the 451 catalogued services to the legal entity or parent company behind it, and the group list shows that 21 of those parents hold more than one brand. Knowing who that is tells you whose hardware carries your requests and which courts can demand data about you.

Why a handful of groups hold so many VPN brands

Buying an existing VPN costs less than building one: the buyer takes the user base, the store ratings and the name recognition, so the old logo usually survives the deal while the new owner stays in the small print. Antivirus makers push the same count upward, because they bundle a VPN into their security suite and often keep the labels of companies they absorbed. In this hub's data the biggest holder is Gen Digital with eight VPN-related brands, from Norton VPN and Avast SecureLine to HMA VPN and Avira Phantom VPN. Kape Technologies follows with four: Private Internet Access, ExpressVPN, CyberGhost VPN and Intego Privacy Protection VPN. Beyond those two, six groups own three brands each and thirteen own two.

What changes when a VPN has a parent company

A takeover does not move the brand itself. The subsidiary keeps its own legal entity and registration country, and that entity determines whose courts and data requests apply to the service. Two consequences follow.

Same owner, different jurisdictions and scores

Within the Kape group, the brands sit under three jurisdictions: one registered in the USA, one in the British Virgin Islands, one in Romania. Their scores drift just as widely, from 5.13 down to 1.30, because policies, audits and app quality are decided per product, not per holding. The same pattern shows up under Gen Digital, whose ranked brands span 3.29 to 1.70. The parent is context; each brand stands or falls on its own record. Switching to a sibling brand keeps your data inside the same group, which matters if your reason for leaving one was distrust of the owner.

Shared infrastructure behind supposedly unrelated apps

The paper "Hidden Links: Analyzing Secret Families of VPN Apps" by Benjamin Mixon-Baca, Jedidiah Crandall and Citizen Lab's Jeffrey Knockel appeared in the FOCI 2025 proceedings of the Privacy Enhancing Technologies Symposium. It traces three families of Android VPN providers that disguise their common ownership, together exceeding 700 million Google Play downloads, and links them through business filings and app analysis. The apps ship shared server credentials, including Shadowsocks passwords hard-coded into the clients. A password pulled out of one app lets an attacker decrypt that app's traffic, and apps built on the same credentials share the same weakness.

An unnamed operator is a warning sign

Of the 377 services in the main ranking, 64 publish no legal entity at all, 41 of those name no jurisdiction either, and 7 of them sit in the top 50. That is not counted against the score: VPNRadarLab punishes three concrete red flags, storing connection IPs, a public security incident and Chinese jurisdiction, and treats a missing entity as a reason to look closer rather than proof of bad practice. Still, you are handing every request to hardware the operator controls, and a provider who will not say who it is denies you the chance to check which law applies. Search the privacy policy, the app-store seller field and the payment receipt; if all three stay silent, that says something on its own.

How to read the owner table on this site

Each service card carries an owner block: the legal entity, the registration country, the address where the provider publishes one, the jurisdiction, and any related brands. The most-searched services get a dedicated owner page, such as the one covering NordVPN's company chain. Group-level pages list every brand of a holding with its segment, score and jurisdiction; see Gen Digital's VPN brands or the Kape Technologies group.

What the 377 ranked services disclose about their operator:

An empty parent field means the site has nothing on record, not that the service is independent. Where they exist, transparency reports and warrant canaries show how a provider handles government requests.

FAQ

Do several VPN brands really belong to one company?

Yes. The hub counts 21 groups that own more than one brand each, with the largest holding eight.

How do I find out who owns my VPN?

Read the operator named in the terms, cross-check the app-store seller and the payment receipt, then look the service up in the owner table on this page.

Does a large parent company make a VPN safer?

Not automatically. Ownership is not a scored criterion, and sibling brands of one group land at very different points in the ranking.

VPN ownership in short

Behind your VPN stands a legal entity that runs the service and answers for your traffic. Of 377 ranked services, 313 name their operator and 64 do not, while only 20 publish a transparency report. Check the entity first, then judge each brand by its own policies and audits.