# @kazani: Mullvad VPN passes X41 D-Sec security audit with no critical flaws

Source: https://farcaster.xyz/kazani/0xc8135939
Kiwi News: https://news.kiwistand.com/stories/kazani-Mullvad-VPN-passes-X41-D-Sec-security-audit-with-no-critical-flaws?index=0x6974920ba546698ca40ea02708299adbc1d1f14cf34599ed768b1c5013d8d045373bd316
Submitted by @kazani on 2026-01-24 UTC, 4 upvotes, 0 comments

## Summary

Mullvad VPN published a new security audit report by the German firm X41 D-Sec, which found no critical flaws or risks to user privacy. The white-box audit covered backend services for accounts and payments, including the public API, authentication, device registration, payment processing, and WireGuard key distribution. It identified 3 medium-severity issues, which Mullvad fixed during the audit, and the auditors also recommended strengthening mutual TLS configuration, cryptographic signatures in VPN relays, and concurrency management. The audit noted Mullvad's minimalist data management, including separation of user identities from VPN keys and regular key rotation.

## Article

Mullvad continues to pass audits

https://mullvad.net/en/blog/new-security-audit-of-account-and-payment-services

A new security audit report conducted by the German firm X41 D-Sec on Mullvad VPN concludes that no critical flaws or risks to user's privacy were found.

The white-box audit focused on the backend services of accounts and payments, including the public API, authentication, device registration, payment processing, and WireGuard key distribution.

While 3 medium-severity issues were found, Mullvad responded quickly by fixing the vulnerabilities during the audit and considering recommendations to strengthen aspects such as mutual TLS configuration, cryptographic signatures in VPN relays, and concurrency management in multithreaded environments.

The audit positively highlights Mullvad's minimalist approach to data management, with strict compartmentalization separating user identities from VPN keys, and regular key rotation.

Rightly so, Mullvad is one of the best VPN you can have today.