BREACH AND BEYOND
,Q2FWREHU LWFDPHWROLJKWWKDWDQDWWDFNHU
UHPRWHO\DFFHVVHGRQHRI1RUG931¶VVHUYHUV1RUG931
VD\VWKHUHLVQRHYLGHQFHWKDWWKHDWWDFNHUREWDLQHG
DQ\WKLQJVLJQL¿FDQW7KHFRPSDQ\KDVVLQFHLQYHVWHG
VLJQL¿FDQWWLPHDQGFDSLWDOLQWRKDUGHQLQJLWVV\VWHPV
DQGSUDFWLFHVLQFOXGLQJWKHPRYHVWRLWVRZQVHUYHU
FOXVWHUVDQGGLVNOHVVVHUYHUV
1RUG931MRLQHGZLWKVHYHUDORWKHU931FRPSDQLHVWR
IRUPDWUDGHJURXSFDOOHGWKH9317UXVW,QLWLDWLYH7KH
,QWLDWLYH¶VDLPDPRQJRWKHUWKLQJVLVWRVHWVWDQGDUGV
IRUWKHLQGXVWU\EULQJLQJVRPHFODULW\WRWKLVRSDTXH
ZRUOG:HORRNIRUZDUGWRZKDWWKLVRUJDQL]DWLRQ
DFFRPSOLVKHVEXWWKLQJVKDYHEHHQPRVWO\TXLHWVR
IDU7KHFRPSDQ\KDVDOVRFUHDWHGDQDGYLVRU\ERDUG
IRU1RUG931
1RUG931KDVDOVRLQLWLDWHGDEXJERXQW\SURJUDP
SD\LQJRXWFDVKUHZDUGVWRUHVHDUFKHUVZKR¿QGÀDZV
LQLWVV\VWHP7KHVHSURJUDPVDLPWRSURYLGHDEHWWHU
LQFHQWLYHIRU¿QGLQJDQG¿[LQJEXJVUDWKHUWKDQ
YXOQHUDELOLWLHVEHLQJZHDSRQL]HG
3ULFH:DWHUKRXVH&RRSHUKDVFRPSOHWHGWZRDXGLWVRI
1RUG931VLQFH1RWDEO\LWLQFOXGHGDQDXGLWRI
1RUG931¶VVHUYHULQIUDVWUXFWXUHDQGFRQFOXGHGWKDWWKH
FRPSDQ\ZDVLQGHHGOLYLQJXSWRLWVFODLPVRIQRW
ORJJLQJXVHUGDWDRULQIRUPDWLRQ$XGLWVDUHLPSHUIHFW
WRROVEXWWKH\DUHDPHDVXUHRIDFFRXQWDELOLW\WKDW
ZHDSSUHFLDWH
HANDS ON WITH NORDVPN
)RUWHVWLQJ1RUG931,XVHGDQ,QWHO18&.LW
18&L%(+ %HDQ&DQ\RQ UXQQLQJWKHODWHVWYHUVLRQ
RI:LQGRZV²EXW1RUG931¶VDSSLVH[FHOOHQW
UHJDUGOHVVRIWKHSODWIRUP\RXXVH7KH:LQGRZVFOLHQW
NordVPN has
also initiated a
bug-bounty
program,
paying out
cash rewards
to researchers
who find flaws
in its system.