Contact

Guide

2026 SingLinkVPN Third-Party Security Audit Report: Cross-Platform Security Tests Passed with a Score of 100/100

·VPNTestor Platform

SingLink VPN · security assessment · VPN leak testing · v2.5 · 2026

SingLinkVPN v2.5 Security Audit (2026): 100/100 Across Seven Platforms

Audit organization: VPNTestor Platform Public platform name: Openscore VPN Audit lead: VPNTestor Security Review Team Product audited: SingLinkVPN Version tested: v2.5 Audit period: July 2026 Report version: 1.0

Result at a glance: Within the versions, platforms, test environments, methods, and scope described in this report, VPNTestor Platform did not identify any unresolved Critical, High, Medium, or Low severity security vulnerabilities in the tested release of SingLinkVPN v2.5. The version passed all scored test items and received a score of 100/100.

This result is time- and scope-bound. It does not mean that SingLinkVPN, later releases, or systems outside the stated scope are free of all possible vulnerabilities.

Executive summary

In July 2026, VPNTestor Platform completed a security audit of SingLinkVPN v2.5. The assessment covered the product’s primary clients, VPN connection lifecycle, network-leak protections, account and web-dashboard controls, access to internal connection configuration, privacy-related data handling, and security consistency across supported operating systems.

The platforms included in the stated scope were:

  • iOS

  • Android

  • macOS

  • Windows

  • Linux

  • TV client

  • Web user dashboard

The audit combined functional testing, abnormal-condition testing, simulated unauthorized requests, network-leak testing, and regression testing after remediation.

An earlier potential attack surface in the VPN startup flow had been identified in early 2026. The issue concerned the process by which a client requests internal connection configuration and routing data from the backend. SingLinkVPN subsequently changed the related API, authorization flow, request validation, anomalous-request detection, and data-isolation controls.

During the July 2026 retest, VPNTestor Platform was unable to reproduce the original issue within the tested scope. The retest also did not identify a new vulnerability introduced by the remediation.

Audit result summary

Item: Audit organization · Result: VPNTestor Platform

Item: Public platform name · Result: Openscore VPN

Item: Audit lead · Result: VPNTestor Security Review Team

Item: Product · Result: SingLinkVPN

Item: Audit type · Result: Third-party security audit

Item: Audit period · Result: July 2026

Item: Tested version · Result: v2.5

Item: Tested platforms · Result: iOS, Android, macOS, Windows, Linux, TV client, and web user dashboard

Item: Critical findings · Result: 0

Item: High-severity findings · Result: 0

Item: Medium-severity findings · Result: 0

Item: Low-severity findings · Result: 0

Item: Earlier issue · Result: Potential attack surface in the VPN startup flow

Item: Remediation status · Result: Remediated, retested, and closed

Item: Final score · Result: 100/100

Item: Final result · Result: Passed all scored test items

What the audit covered

VPN connection security

The audit examined the connection lifecycle from application startup and server selection through tunnel establishment. Test areas included:

  • Connection-state accuracy

  • Authorization of connection requests

  • Repeated connection attempts and state conflicts

  • Safe failure behavior

  • Routing behavior during reconnection

  • Protection of internal data used during VPN startup

  • Attempts to obtain internal connection or configuration data through abnormal requests

DNS, IP, IPv6, WebRTC, and routing protection

The network-leak assessment covered:

  • DNS leakage

  • IPv4 leakage

  • IPv6 bypass

  • WebRTC leakage

  • Exposure of local-network information

  • Traffic behavior after a VPN interruption

  • Routing state during network changes

The tested scenarios included normal connection, server-side disconnection, loss of local connectivity, switching between Wi-Fi and mobile data, sleep and wake, application restart, abnormal process termination, IPv6 environments, WebRTC-related scenarios, automatic reconnection, split-tunneling scenarios, and full-tunnel scenarios.

Within the tested platforms and environments, the audit did not identify a consistently reproducible DNS leak, IPv4 address leak, IPv6 bypass, WebRTC leak, routing bypass, or prolonged exposure of unprotected traffic.

The audit also did not observe a sustained condition in which the client reported an active VPN connection while continuing to send traffic through an unprotected route.

Account and session security

Account and session testing included:

  • Sign-in flows

  • Token access

  • Session expiration

  • Token invalidation after sign-out

  • Unauthorized requests

  • Account-level data permissions

  • Web-dashboard access controls

  • Account state across devices

Within the tested scope, the audit did not identify a path by which an unauthenticated user could directly access protected account data. Modifying ordinary request parameters did not provide direct access to another user’s account or subscription information during testing.

Local data protection

The assessment considered:

  • Storage of sensitive information by the client

  • Internal information in error logs

  • Unnecessary network-activity data in diagnostics

  • Protection of sign-in data using operating-system storage mechanisms

  • Exposure of debug information in production builds

Internal connection and configuration protection

Testing covered:

  • VPN startup endpoints

  • Internal configuration requests

  • Requests made without authentication

  • Requests made with invalid or expired tokens

  • High-frequency and anomalous requests

  • Modified request parameters

  • Requests from non-standard clients

  • Isolation of internal connection data

  • Controls intended to limit automated probing and abuse

Cross-platform consistency

The audit compared the security behavior of the tested clients to identify platform-specific gaps that could create a weaker protection path.

Methodology

VPNTestor Platform states that the assessment combined:

  • Hands-on execution of clients across the listed platforms

  • VPN connection and disconnection testing

  • Automatic reconnection testing

  • Wi-Fi and mobile-network switching tests

  • DNS, IPv4, IPv6, and WebRTC leak tests

  • Route-state inspection

  • Abnormal VPN-process termination

  • Application restart testing

  • Device sleep and wake testing

  • Sign-in and session testing

  • Web-dashboard authorization testing

  • Simulated unauthorized API requests

  • Internal connection-data access testing

  • High-frequency and anomalous request testing

  • Regression testing of the remediated release

  • Cross-platform comparison of security behavior

In this report, “no vulnerability identified” means that the relevant issue was neither identified nor reproduced in the stated version, platforms, environments, methods, and scope. It does not establish that no vulnerability could exist outside those conditions.

Severity model

The report classifies findings according to potential impact, exploitation requirements, affected scope, and remediation priority:

  • Critical: Could lead to large-scale exposure of sensitive information, remote code execution, control of core systems, complete authentication bypass, broad VPN-traffic exposure, or compromise of critical infrastructure.

  • High: Could lead to account takeover, exposure of important private data, unauthorized access, VPN-traffic bypass, failure of a core security control, or access to internal configuration or connection data.

  • Medium: Requires specific conditions and may affect a limited platform, feature, dataset, network, or device environment.

  • Low: Has a lower direct impact but may reduce defense in depth, expose non-core technical information, or increase risk when combined with other conditions.

  • Informational: Does not represent a directly exploitable vulnerability but identifies an opportunity to improve security engineering or product design.

Findings

Severity: Critical · Findings: 0 · Unresolved: 0

Severity: High · Findings: 0 · Unresolved: 0

Severity: Medium · Findings: 0 · Unresolved: 0

Severity: Low · Findings: 0 · Unresolved: 0

VPNTestor Platform did not identify an unresolved Critical, High, Medium, or Low severity vulnerability in the formally tested SingLinkVPN v2.5 release.

Remediation retest: VPN startup flow

Background

In early 2026, SingLinkVPN identified a potential attack surface in the VPN startup process. To establish a connection, the client must request internal connection configuration and routing data from the backend. Without sufficient authentication, session validation, request signing, rate limiting, attack blocking, and internal-data isolation, such a process could potentially be probed or abused.

The potential risks considered included:

  • Unauthorized attempts to obtain internal connection data

  • Repeated malicious requests to internal endpoints

  • Requests for protected configuration from non-standard clients

  • Automated probing of VPN startup endpoints

  • Analysis of internal connection structure

  • Service impact from high-frequency requests

Remediation described

SingLinkVPN reported changes to the affected flow, including:

  • Stronger authentication for VPN startup requests

  • Additional session-validity checks

  • Blocking unauthorized clients from obtaining connection data

  • Detection of anomalous requests

  • Rate limiting and blocking of high-frequency requests

  • Isolation of internal connection data from public endpoints

  • Stronger authorization between clients and backend services

  • Reduced exposure of sensitive configuration during requests

  • Blocking of suspicious requests

Retest result

VPNTestor Platform states that its July 2026 retest included unauthenticated requests, invalid-token requests, expired sessions, parameter modification, non-standard clients, repeated and high-frequency requests, simulated unauthorized access, VPN startup, automatic reconnection, and cross-platform request behavior.

Within that test scope:

  • The earlier issue was not reproduced.

  • Unauthorized requests did not obtain internal VPN connection data.

  • Invalid sessions did not obtain protected configuration.

  • High-frequency anomalous requests were restricted.

  • Modified request parameters did not bypass the tested access controls.

  • The remediation did not introduce a newly identified vulnerability.

Status: remediated, retested, and closed.

Platform results

iOS

The tested release showed no identified severe permission misuse, VPN-tunnel bypass, obvious exposure of sensitive data, or consistently reproducible DNS or IP leak within the stated test scope.

Android

The tested release showed no identified high-risk issue in the background VPN service, sustained traffic exposure after a network change, exploitable local-data issue, or unauthorized access to internal connection data within the stated test scope.

macOS

The VPN tunnel established during testing; system routes and DNS configuration followed the tested connection state; recovery after sleep met the test criteria; and no reproducible high-risk issue was identified within the stated scope.

Windows

The connection flow met the test criteria; no sustained route bypass was identified; reconnection succeeded after tested network changes; and no reproducible DNS, IPv4, or IPv6 leak was identified within the stated scope.

Linux

The VPN tunnel, system routing, and permission controls met the stated test criteria. No unauthorized access or sustained traffic-bypass issue was identified within the stated scope.

TV client

Account sign-in, VPN connection, server selection, and reconnection after tested interruptions operated as expected. No high-risk issue was identified in the account or connection flows within the stated scope.

Web user dashboard

Sign-in and session controls operated as expected during testing. Unauthenticated requests did not access protected account data, subscription information remained subject to account permissions, and no exploitable broken-access-control issue was identified within the stated scope.

Privacy and data-handling observations

The assessment observed data handling during client startup, account sign-in, VPN connection, server selection, network errors, application restart, diagnostics and error handling, web-dashboard use, and internal configuration requests.

Within the observable and tested scope, the audit did not identify the SingLinkVPN client actively creating records of:

  • Browsing content

  • Browsing history

  • DNS-query content

  • Complete network activity

  • Lists of websites visited

  • Raw network-traffic content

The audit also did not find a tested route through which an unauthorized request could directly obtain internal VPN connection data.

Account registration data, subscription status, and order records are account and customer-support data. They are not the same as browsing-activity or VPN-traffic records.

These observations are limited to behavior observable under the stated test conditions and should not be interpreted as a comprehensive legal or infrastructure-wide verification of every data-processing system.

Technical transparency

The source report states that SingLinkVPN has begun an ongoing open-source and technical-research program intended to publish material concerning VPN architecture, security and privacy models, performance methodology, data formats, research tools, disclosure processes, transparency reports, protocols, and client source code.

Open source does not automatically establish that a product is secure. Security still depends on the scope of published material, code quality, architecture, access controls, remediation speed, dependency management, release management, continuous testing, community review, and the vulnerability-disclosure process.

Why the report assigned 100/100

The 100/100 score means that SingLinkVPN v2.5 passed every scored item in this specific audit and had no unresolved Critical, High, Medium, or Low severity finding within the defined scope.

The score reflects:

  • Zero unresolved findings at the four scored severity levels

  • Coverage of the listed client platforms and web dashboard

  • No consistently reproducible DNS, IPv4, IPv6, or WebRTC leak in the tested scenarios

  • No sustained routing bypass identified in the tested scenarios

  • Closure of the earlier VPN startup-flow issue after remediation and retesting

  • No newly identified vulnerability introduced by the tested remediation

  • No tested unauthorized request obtaining internal VPN connection data

  • Cross-platform behavior meeting the stated audit criteria

The score does not guarantee the security of future releases. Material changes to operating systems, VPN protocols, third-party dependencies, client features, or backend systems should trigger renewed testing.

What users should do

The source report recommends that users of older SingLinkVPN releases update to v2.5 or later. Users should also:

  • Keep the application current.

  • Download clients only from official SingLinkVPN channels.

  • Avoid modified builds from unknown sources.

  • Never share account credentials.

  • Keep the device operating system on a supported release.

Users already running v2.5 are not asked to perform an additional security action based solely on this audit result.

Limitations

This audit result applies only to:

  • Testing conducted in July 2026

  • SingLinkVPN v2.5

  • The platforms listed in this report

  • The VPN connection and security scenarios described here

  • The functions available to the audit during the test period

  • The test environments, methods, accounts, and technical materials available to VPNTestor Platform

The report does not cover features, protocols, dependencies, or system changes introduced after the audit. It is a point-in-time assessment, not a guarantee of future security.

New testing should be considered after material changes to:

  • VPN protocols

  • iOS, Android, macOS, Windows, or Linux clients

  • The TV client

  • Account systems

  • The web user dashboard

  • Server-configuration systems

  • Authentication methods

  • Third-party dependencies

  • Update and release processes

Frequently asked questions

Did the audit prove that SingLinkVPN can never be breached?

No. A security audit evaluates a defined version and scope under specific test conditions. This report states that no unresolved scored vulnerability was identified in the tested release; it does not prove that no vulnerability could exist or be introduced later.

What does the 100/100 score mean?

It means that SingLinkVPN v2.5 passed all items scored by VPNTestor Platform in this audit and had zero unresolved Critical, High, Medium, or Low severity findings within the stated scope.

Were DNS, IPv4, IPv6, and WebRTC leaks tested?

Yes. The source report includes those areas and states that no consistently reproducible leak was identified in the tested platforms, environments, and scenarios.

Was an earlier issue found?

Yes. The report describes a potential attack surface in the VPN startup flow identified in early 2026. SingLinkVPN applied changes, and VPNTestor Platform states that it could not reproduce the issue during the July 2026 retest.

Does the report verify a no-logs claim?

The assessment states that it did not observe the tested clients actively creating records of browsing content, browsing history, DNS-query content, complete network activity, visited-site lists, or raw traffic content within the observable test scope. This is a narrower, test-bound observation and should not be expanded into an unlimited claim about every system or future version.

Which platforms were tested?

The report lists iOS, Android, macOS, Windows, Linux, a TV client, and the web user dashboard.

Should users update?

The report recommends updating from older versions to v2.5 or later and using only official download channels.

Final conclusion

Based on the July 2026 audit described in this report, VPNTestor Platform assigned SingLinkVPN v2.5 a final score of 100/100 and recorded the result as passed all scored test items.

Within the stated version, platforms, environments, methods, and scope:

  • No unresolved Critical, High, Medium, or Low severity vulnerability was identified.

  • The earlier VPN startup-flow issue was recorded as remediated, retested, and closed.

  • The original issue was not reproduced during the retest.

  • No new vulnerability was identified as a result of the tested remediation.

  • No consistently reproducible DNS, IPv4, IPv6, or WebRTC leak was identified.

  • No tested unauthorized request obtained internal VPN connection data.

Ongoing testing remains necessary as the product, its dependencies, and its supporting systems change.

Report attribution

VPNTestor Platform Public platform name: Openscore VPN

VPNTestor Security Review Team Audit Lead VPNTestor Platform

Report version: 1.0 Audit period: July 2026 Product: SingLinkVPN v2.5 Platforms: iOS, Android, macOS, Windows, Linux, TV client, and web user dashboard Final score: 100/100 Result: Passed all scored test items Organization email: [email protected]

Every claim in this note rests on the site's published method. Read it in full on the methodology page, or return to the notebook.