ExpressVPN

Help us improve the security and privacy of ExpressVPN users.

  • $150 – $2,500 per vulnerability
  • Up to $100,000 maximum reward
  • Safe harbor
Submit report

Exciting updates to our applications!

We have made numerous improvements and implemented new exciting features to our client applications! We have described these changes in detail below so check them out and submit your security findings through BugCrowd.

[RELEASE] ExpressVPN for iOS 11.69.0

  • We found some low priority security bugs that weren’t exploitable, but we fixed them anyway!
  • We’ve made connectivity improvements for some countries.
  • We implemented translations for text related to the recently released network protection feature, visible if you have set your app to a language other than English.
  • Some information in the diagnostic report went missing, but we tracked it down!
  • We implemented a pop-up window for Network Protection which tells you to disconnect first before changing the VPN settings.

[RELEASE] ExpressVPN for Android 10.62.0

  • We’ve made connectivity improvements for some countries.
  • This app version marks the launch of Parallel Connections on Android, which improves how quickly the app gets connected to the VPN, especially on networks that apply some traffic restrictions. Get connected in under 2 seconds!
  • We’ve made some refinements under the hood to give you a smoother experience.

[RELEASE] ExpressVPN for Linux 3.34.1

  • We’ve made connectivity improvements for some countries.

[RELEASE] ExpressVPN for Windows 10.36.0

  • We’ve made connectivity improvements for some countries.
  • Check us out! We’ve made some improvements to our app to improve your user experience. We sorted a couple of bugs in this release, where you may have:
    • Seen a “Service Unreachable” message when starting the app.
    • Been unable to browse after your attempt to connect to the VPN was rejected because of the simultaneous-device limit, even when Network Lock was set to “off.” (This suspension of internet access should only occur when Network Lock is set to “on.” Network Lock is designed to block access whenever your device is not connected to the VPN, to prevent any risk of data leaking outside the encrypted VPN tunnel.)
  • Removed logging information to the console when using ExpressVPN CLI on the Windows App v12 in favor of logging to a file. Added the Command Line Interface "diagnostics" command to allow displaying the latest diagnostics information to the console.

[RELEASE] ExpressVPN for Mac 11.10.1

  • In this release, we:
    • Made some stability and performance improvements.
    • Updated the translations for “Australia – Woolloomooloo” in our list of server locations.
  • We’ve made connectivity improvements for some countries.

We’re always happy to hear about any security issues in our applications, so, as always, happy hunting - we look forward to your submissions.

monty
monty