Is CyberGhost VPN Safe in 2026? Security, Audits and Real Risks
A plain-English look at audits, logging, ownership, leaks, torrenting and the limits that still matter.
Quick answer: yes, I still regard CyberGhost as a safe VPN for most everyday users in 2026. I refreshed this safety check on 3 September 2026, going back through its current no-logs material, the third Deloitte Audit Romania assurance review, Q2 transparency and bug-bounty reporting, current Windows privacy settings and the latest iPhone release information. The fundamentals remain sound: WireGuard, OpenVPN and IKEv2, an automatic kill switch, DNS leak controls and RAM-only server infrastructure. The caveats are more specific than the old version of this guide suggested. CyberGhost still does not support port forwarding or a general stealth mode that disguises the whole VPN tunnel, although some Android and TV apps now include Domain Fronting to help the app reach CyberGhost services when its domains or IPs are blocked. I also still factor the wider Kape ownership into the trust picture. If you want speed, streaming and broader app testing alongside this safety view, read our full CyberGhost VPN review.
What stands up well
When I look at CyberGhost purely as a safety product, there is more evidence behind its privacy claims than I see from many mid-priced VPNs. Repeated audits, quarterly transparency reporting, mainstream protocol support and RAM-only infrastructure all count in its favour.
What needs context
The audit trail is stronger than it was a few years ago, but I still would not reduce the trust decision to one badge. Kape ownership, platform differences and specialist use cases still matter if privacy is your top priority.
Bottom line
CyberGhost is a safe, credible mainstream VPN. It is much better suited to ordinary privacy, travel Wi-Fi, streaming and general use than it is to stealth access on restrictive networks.
What CyberGhost Gets Right
CyberGhost’s safety case is not built on marketing lines alone. I rechecked its current transparency data for this update. The latest quarterly report covers Q2 2026: CyberGhost recorded 64,006 DMCA complaints and five police requests between April and June. Across the first six months of 2026, that brings the published totals to 117,539 DMCA complaints and nine police requests. CyberGhost says it had no browsing or connection logs to hand over in response.
I also like that the reports now expose some of the messier security work rather than pretending vulnerabilities never appear. CyberGhost says its Q1 bug-bounty programme identified five valid issues that were patched, while Q2 produced 49 submissions, including two valid issues that were passed to the relevant teams for assessment and remediation where required. That is not proof that the product can never have a vulnerability; it is evidence that outside researchers have a route to report them and that CyberGhost is publishing the outcomes.
The short version
CyberGhost covers the important safety basics well. That means modern protocols, a kill switch, DNS leak controls, RAM-only servers, routine transparency reporting and repeated no-logs audits.
- It has a clearer privacy story than many low-cost VPNs.
- Its current public materials say it does not log browsing history, DNS queries, VPN servers used, data transferred, IP assignments, or connection date and duration.
- It supports WireGuard, OpenVPN and IKEv2 instead of leaning on old, weaker options.
- It says its infrastructure uses RAM-only servers, which reduces the chance of data lingering after a reboot.
- It includes a kill switch and DNS leak controls, which are the sort of practical protections that matter more than flashy extras.
Audit History and No-Logs Claims
This remains one of the strongest parts of CyberGhost’s safety case for me. Deloitte Audit Romania reviewed its no-logs controls in 2022, again in 2024, and CyberGhost completed a third independent assurance engagement in 2026. The latest engagement was conducted under ISAE 3000 (Revised). I put much more weight on that repeated pattern than on a one-off audit that a provider keeps quoting for years after the product has changed.
Why this matters
The 2026 scope is also useful rather than cosmetic. Deloitte examined CyberGhost’s VPN server network, configuration and change-management processes, incident-response controls, and the token-based Dedicated IP system intended to prevent an account being directly associated with a particular dedicated IP. That is the kind of scope I want to see when a VPN leans heavily on a no-logs claim.
The sensible caveat
Audits are helpful, not magical. The right way to read them is as one strong trust signal among several. You still need to consider ownership, product decisions, support history and whether the service is built for your actual use case.
What Data CyberGhost Collects, and What It Says It Does Not
This is where I stop treating “no logs” as a slogan and look at what the provider actually says it excludes. CyberGhost’s current material says it does not log incoming or outgoing IP addresses, browsing history, websites visited, data transferred, VPN servers used, DNS queries, downloaded files, software information/version, or connection date and duration. That is the core privacy claim I care about.
It still processes enough information to run a paid account. CyberGhost says this includes basics such as email address, billing data, order history, connection attempts and service-use information in anonymised form. I would not describe any commercial VPN as an invisibility cloak; the important distinction is whether the service keeps the tunnel activity and connection records that could later be tied back to what you did.
Plain English
CyberGhost still knows enough to run a subscription service, but its public privacy position says it does not keep the activity logs that would let it reconstruct what you did online through the VPN tunnel.
Encryption, Protocols and Leak Protection
CyberGhost still supports WireGuard, OpenVPN and IKEv2. When I rechecked the current Windows settings for this update, those protocol choices were still present alongside DNS leak prevention and the automatic kill switch. For most people I would start with WireGuard, keep OpenVPN as the mature compatibility fallback, and only switch protocols when there is a practical reason to do so.
WireGuard
Fast, modern and usually the best first choice for most people.
OpenVPN
Mature, trusted and still a very solid option when compatibility matters.
Leak controls
Kill switch and DNS leak controls help stop your traffic slipping outside the tunnel if the connection drops; our visual guide explains how a VPN kill switch works in practice.
CyberGhost also says its network uses RAM-only servers that wipe data on reboot. That is a sensible privacy-by-design choice because volatile memory does not hang on to information the way a traditional drive can. It will not matter to every buyer, but it is still the sort of infrastructure decision you would rather have than not have.
After setup, it is worth testing the browser you actually use. Connect to CyberGhost, open your normal browser profile, and check for WebRTC leaks, especially after changing browsers, extensions or VPN protocols. WebRTC leaks are not the same as DNS leaks, but they can still expose information that weakens the privacy benefit you expected.
I also rechecked the mobile side rather than assuming the desktop feature set applies everywhere. CyberGhost’s current UK iPhone listing is on version 8.6.0, released on 24 August 2026. On Android and some TV apps, CyberGhost now documents a Domain Fronting option that can help the app reach CyberGhost services when local networks block its domains or related IP addresses. I would treat that as a useful connectivity aid, not as a full stealth protocol that makes all VPN traffic look like ordinary non-VPN traffic.
Jurisdiction, Ownership and Trust
CyberGhost was founded in Bucharest, Romania, and still presents itself as a Romania-based provider. That is generally a plus. CyberGhost’s own privacy materials point to Romania as a jurisdiction without legal mandates to keep browsing activity logs, and the company also highlights that Romania sits outside the 5, 9 and 14 Eyes intelligence-sharing alliances.
Jurisdiction is only one part of the trust picture I use. CyberGhost is part of Kape Technologies, which acquired the company in 2017 and also owns other major privacy brands. That ownership does not make CyberGhost unsafe by itself, but I still include it when judging provenance, corporate concentration and how much trust I am placing in the wider group rather than one product team.
My take on this
Romania is a plus. Repeat audits are a plus. Transparency reports are a plus. Ownership is the point that stops CyberGhost from feeling like the easiest recommendation for people who put trust above everything else.
Is CyberGhost Safe for Torrenting and Streaming?
For mainstream use, yes. CyberGhost offers P2P-optimised servers and continues to market the service heavily around streaming and everyday privacy. If your idea of safe means hiding your home IP while torrenting ordinary legal content, using public Wi-Fi more safely, or keeping your browsing less exposed on hotel and airport networks, CyberGhost is a decent fit.
The catch is that advanced users may run into limits. CyberGhost does not allow port forwarding, which can matter for some torrenting setups and may affect performance in certain cases. That does not make it unsafe, but it does mean power users may find it less flexible than some rivals.
Best fit
CyberGhost makes most sense for people who want a polished VPN for streaming, torrenting on supported servers, travel Wi-Fi safety and general privacy. It makes less sense for users who need specialist features for stealth or harder network environments.
What Holds CyberGhost Back
CyberGhost is safe, but calling it flawless would be less helpful than being honest about the trade-offs. The issue is not one catastrophic red flag. It is the gap between being a solid mainstream VPN and being the strongest possible choice for edge cases.
- No general stealth mode: CyberGhost now documents Domain Fronting in some Android and TV apps to help those apps reach CyberGhost services when domains or related IPs are blocked. That is useful, but it is not the same as a general obfuscation or stealth mode that disguises the entire VPN tunnel. I would still choose a more specialist provider for censorship-heavy networks.
- No port forwarding: CyberGhost’s support material says it does not allow port forwarding. This will not bother most casual users, but it matters to some torrenting enthusiasts and advanced network users.
- Less depth for specialist privacy use: If you want anti-censorship tooling or a more specialist privacy stack, there are stronger options.
- Ownership concerns: For some buyers, the Kape link will remain a trust drag however tidy the public privacy messaging looks.
- Platform differences: Not every app feels identical, so it is worth checking the features on your own device rather than assuming every platform has the same knobs and options.
These limits do not make CyberGhost unsafe, but they are exactly the areas where CyberGhost alternatives may be a better fit, especially if stealth access, port forwarding or a different ownership story matter to you.
Is CyberGhost Good Value if Safety Matters?
Usually, yes. The cheapest VPN on the page is rarely the best bargain if trust matters. Budget services often cut corners on audits, transparency, infrastructure or app quality. CyberGhost tends to land in a more sensible middle ground. It is not the absolute cheapest service around, but it usually gives buyers a healthier balance between price and credibility than the brands that feel half-finished or anonymous.
If you want the full picture on speed, streaming, apps and daily usability, our CyberGhost review goes wider than this safety page. If you are weighing it against a more premium option, our ExpressVPN review is the most useful comparison point.
The key point
A low price only helps if the VPN is still worth trusting. CyberGhost keeps showing up because it is often affordable without looking flimsy, faceless or careless.
Final Verdict
So, is CyberGhost VPN safe?
Yes, with sensible caveats. After rechecking the current audit trail, transparency data, app settings and infrastructure claims on 3 September 2026, I still think CyberGhost clears the bar comfortably for most everyday users. The repeated Deloitte assurance work matters, the protocol support is current, the kill switch and DNS leak controls cover the important basics, and the RAM-only design is another positive. The gaps are specialist ones: no port forwarding and no general stealth mode that disguises the whole VPN tunnel. Domain Fronting on some Android and TV apps helps with reaching CyberGhost services on blocked networks, but I would not treat it as a substitute for a purpose-built anti-censorship protocol. For ordinary privacy, public Wi-Fi, streaming and supported P2P, CyberGhost remains a credible choice.
Frequently Asked Questions
Is CyberGhost safe for banking and public Wi-Fi?
Yes. For ordinary use, CyberGhost adds a useful layer of protection on public Wi-Fi and shared networks. It is not a replacement for strong passwords, two-factor authentication or safe browsing habits, but it does make casual snooping far harder.
Does CyberGhost keep logs?
CyberGhost says it does not log browsing history, DNS queries, data transferred, VPN servers used, IP assignments, or connection dates and duration. It still keeps limited account and billing information needed to run a paid VPN service.
Is CyberGhost safe for torrenting?
Yes. CyberGhost supports P2P traffic on designated servers and is generally a safe pick for torrenting legal content. The main limitation is that it does not allow port forwarding, which some advanced users will care about.
Is CyberGhost good for censorship-heavy countries?
CyberGhost is still not my first choice for censorship-heavy networks. Some Android and TV apps now include Domain Fronting to help the app reach CyberGhost services when its domains or related IP addresses are blocked, but that is not a general stealth or obfuscation mode for the full VPN tunnel.
Who owns CyberGhost VPN?
CyberGhost sits inside the wider Kape group. That does not make it unsafe by default, but ownership is still part of the trust discussion for buyers who care deeply about privacy provenance.
This information is for educational purposes. VPN features, ownership structures, transparency reports and support pages can change. Always test your own setup for IP, DNS and kill switch behaviour before relying on any VPN for privacy-sensitive work.