CyberGhost VPN

A standalone VPN sold worldwide in US dollars

CyberGhost VPN is a consumer VPN, and the VPN is the main product here, though the menu also links a separate Windows Security Suite. The site's language menu runs from English, German and Romanian to Japanese, Korean and Simplified Chinese, and the pricing block states that "All amounts shown are in US Dollars". Apps are offered as direct downloads from the site for Windows, macOS, Linux, Android and iOS, and the platform list on the homepage adds Fire TV, Android TV, Apple TV, Chrome, Firefox, consoles and smart TVs. The encryption page says the app can be had "either from our site or an app store", without naming which store listings exist in which countries. The site does not list the payment methods accepted and does not name any country where the service is not sold. Footers on different pages carry "CyberGhost S.R.L." and "CyberGhost S.A.", and the provider's no-logs page says the service is based in Romania; its 2022 audit post puts the headquarters in Bucharest.

The Deloitte audits and the logging policy

CyberGhost names its auditor. Its privacy hub post, "Third Deloitte Romania Audit Verifies Our Commitment to Privacy", last updated Feb 24, 2026, says the company completed its third independent audit by Deloitte Audit Romania and links the 2025 Deloitte assurance report for download. According to that post, the engagement ran under the International Standard on Assurance Engagements (ISAE) 3000 (Revised), and Deloitte examined how CyberGhost's infrastructure and operational systems are designed to uphold the no-logs policy. The stated scope covered the VPN server network, configuration and change-management processes, incident-response controls, and the dedicated IP token-based system, which the provider describes as a design that prevents any association between a user's account and a specific IP address. The post says Deloitte Audit Romania tested the server architecture and internal safeguards to check that the systems functioned as described. It dates the first Deloitte assessment to 2022 and the second to 2024.

The earlier 2022 post, dated 22 September 2022, adds that the first review gave special attention to the no-logs policy and its implementation, and that excerpts could not be shared, so the report was available on request from Deloitte. A later explainer says the 2024 report can be downloaded from the account dashboard.

The logging claims themselves are the provider's. Its no-logs page states that it does not log incoming and outgoing IP addresses, browsing history, the amount of data transferred, servers used, DNS queries, downloaded files, software version, or connection date and duration. The same page says it does process connection attempts, how often the service is used, an email address, billing data and order history, which it says are stored in an anonymized format. The provider says its servers run on RAM only and are wiped on reboot. It publishes quarterly Transparency Reports, which the 2022 post says it first put out in 2011, and runs a public Vulnerability Disclosure Program. The no-logs page also says Romania sits outside the 5/9/14 Eyes alliances; that is the provider's framing, not ours.

Apps, servers and features

The features page lists 120+ locations across 100 countries and describes 10-Gbps server infrastructure. Three protocols are offered, OpenVPN, WireGuard and IKEv2, and the encryption page says some "may be available only on specific operating systems" and that the app picks one automatically by default. It states that IKEv2 and OpenVPN use AES-256, WireGuard uses ChaCha20-Poly1305, and every session gets a fresh key through Perfect Forward Secrecy. One subscription covers "up to 7 devices" at the same time.

The feature list includes an automatic kill switch, DNS and IP leak protection, split tunneling, a Content Blocker for domains tied to ads, trackers and malware, automatic Wi-Fi protection on unsecured networks, and a paid dedicated IP. There are server groups labeled for streaming, P2P and gaming. The browser add-ons for Chrome and Firefox are described on the homepage as "lightweight proxy extensions", so they are proxies rather than full VPN apps. For devices without a native app, the site suggests setting CyberGhost up on a compatible router to cover consoles, older smart TVs and other home gadgets.

On streaming, the homepage says the 10-Gbps servers can "handle 4K streaming", and the menu has pages titled Stream Sports and Access Content, but the site does not publish a dated list of named streaming services. Torrenting is described as P2P-optimized servers for "open-source downloads", with the homepage noting the IP stays hidden from peers and the kill switch keeps it that way. The site does not mention port forwarding.

Plans, renewal and refunds

The homepage pricing block, in US dollars, shows three plans:

• 1 month at $12.99 per month, which "Autorenews at $12.99 monthly".
• 6 months at $6.99 per month, which "Autorenews at $41.94 every 6 months".
• 2 years plus 2 months at $1.99 per month, "Billed $51.74 for first 26 months, then autorenews at $51.74 annually".

That last line matters. The long plan is billed once for the first 26 months and then renews on a yearly cycle at the same $51.74, so the site does state its renewal terms for each plan rather than leaving them open. A "Fall Special" banner runs across the site, which means these figures are a seasonal promotion as the page shows them.

The refund terms are stated on the homepage: "Request a refund within 45 days (14 days for monthly plans)". The encryption page words it as a full refund if the user contacts CyberGhost within 45 days of purchase. The menu also links a VPN Free Trial page, whose terms the site does not spell out. Support is offered 24/7 by live chat and email, which the homepage says is available in multiple languages, and there is a support library of guides and FAQs.

The homepage also shows a reviews module pointing to Trustpilot and to expert sites, and it discloses that "We sometimes pay expert sites to refer customers to us". Readers weighing the praise on that block should keep the disclosure in mind.

What stays open, and who it suits

The audit trail is the most documented part of this listing: three Deloitte Audit Romania engagements dated 2022, 2024 and 2025, with a stated scope that includes the server network and the dedicated IP token system, and a report that can be downloaded rather than only summarized. An audit is still a point-in-time review, a limit the provider's own explainer names, and the summary on the site is the provider's account of it; the report itself is the document to read.

Other points the site leaves open. It does not list accepted payment methods or say whether any anonymous option exists. It does not say which app stores carry the apps in which countries. It does not name the streaming services its streaming servers are meant for, or date any such claim. It does not mention port forwarding. And the two different company names in its footers, S.R.L. on the product pages and S.A. on the blog, are not explained anywhere on the site.

CyberGhost fits someone who wants a VPN with a named auditor, published renewal terms, a wide app lineup and a long refund window on the multi-year plan. It fits less well for anyone who needs to pay anonymously or who wants a dated, named list of the streaming services it works with before buying.