ExpressVPN

  • $150 – $2,500 per vulnerability
  • Up to $100,000 maximum reward
  • Safe harbor

More updates to our applications!

We have added some great features and bug fixes to improve the applications we build for our clients! Check them out and submit your security findings through BugCrowd. Also, keep an eye out for more exciting updates to our products in the upcoming months!

[RELEASE] ExpressVPN for iOS 11.60.3

  • We fixed a bug that may have caused your app to crash if you had been logged out because of a change in your account details.
  • We solved a bug that kept the connected server location from being reflected in diagnostic reports, if you have enabled Help Improve ExpressVPN.
  • We’ve released an enhanced security feature, Network Protection. When enabled, Network Protection stops all internet traffic to and from your device anytime your VPN connection is temporarily interrupted. While this drastically reduces the risk of any data leaking outside the encrypted VPN tunnel, it may interfere with certain features, such as AirDrop, CarPlay, media casting and Wi-Fi Hotspots. To access Network Protection, go to Options, then tap on Settings. On the same screen, you may also set your device to always allow connections to devices on your local network. Note: Network Protection is only supported on iOS 14 and above.
  • We corrected a few typos in how server locations were rendered in Japanese.
  • We’ve added back acknowledgements for the family of fonts used in the app.
  • We’ve updated the translations for “Australia – Adelaide” in our list of server locations.

[RELEASE] ExpressVPN for Android 10.55.0

  • Improved Lightway Parallel Connect feature to never give up connection attempts.
  • Trim diagnostic info more frequently to avoid slowing down the app.
  • We spruced up our internal engines; the app is running better than it was.
  • We’ve added back acknowledgements for the family of fonts used in the app.
  • We fixed a rare bug that may have caused you to see the message “ExpressVPN isn’t responding” when opening the app and also improved connectivity for some countries.
  • We did a security assessment on our Android app and found a compilation switch that made our app even more secure, so we turned it on!
  • We made some minor security enhancements, so we recommend that you update to the latest app version.
  • Fixed a rare issue where we attempt to connect to the same server more than once
  • Fixed a bug that could cause app to briefly not respond to input
  • We fixed a couple of bugs that may have:
    • Made the app unresponsive.
    • Caused the location shortcuts to appear untranslated for the selected language.
    • Additionally, for Android 13 users and above, you can now set the language option for the app to be different from the language option on your device.

[RELEASE] ExpressVPN for Linux 3.32.0

  • We improved connectivity in some countries.
  • A little fix here, and little fix there. All worth doing, but nothing you’re likely to notice.

[RELEASE] ExpressVPN for Windows 12.32.0

  • Check us out! We’ve made some improvements to our app to improve your user experience.
  • Added the Command Line Interface list command to allow displaying the list of available VPN locations from a command prompt.
  • Added the Command Line Interface network_lock command to allow setting the Network Lock on or off through the command prompt.
  • Added the Command Line Interface protocol command to allow setting the preferred VPN protocol through the command prompt.
  • Added the Command Line Interface connect command to allow connecting to a VPN from a command prompt.
  • Updated the Command Line Interface status command to return the current VPN connection status. In order to check whether the app is activated, use the activation_status command.
  • Updated windows client to send correct diagnostics when a connection is restarted due to server reboot.

[RELEASE] ExpressVPN for Mac 11.8.0

  • We’ve put some refinements under the hood to give you a smoother experience.
  • We improved connectivity in some countries.
  • G’day. We’ve updated the translations for “Australia – Adelaide” in our list of server locations.
  • Fixed a security issue which a malicious website might be able to fingerprint ExpressVPN users who is using the Website Shortcut feature ExpressVPN app runs natively on M1 Mac devices now! Fix connecting to servers from the status bar when the app's language is non-English

We’re always happy to hear about any security issues in our applications, so, as always, happy hunting!