Real-time server stats, bug bounty logs, and protocol usage—X‑VPN wants its infrastructure verifiable, not invisible.
X-VPN has officially launched a new Transparency Report Page, designed to make key operational and security metrics visible, trackable, and updated over time.
The page goes beyond traditional privacy policies or legal disclosures. It includes historical law enforcement and DMCA request statistics, clearly showing that no user data has ever been provided.
But more importantly, it introduces real-time insights into server bandwidth, concurrent connections, bug bounty reports, protocol support, and hardware infrastructure, all presented with year-over-year growth data since 2017.
By publishing what is often kept internal, X-VPN aims to build long-term trust through visibility. Users, researchers, and security professionals can now verify how the service operates without needing to guess or rely solely on marketing promises.
Since its inception, X-VPN has maintained a strict no-logs policy: no traffic data, no IP addresses, no user identifiers. With the launch of its new Transparency Report Page, that policy is now matched with a multi-year track record, backed by hard numbers.
The report details all law enforcement and DMCA takedown requests received by X-VPN from 2017 to November 2025. Each request is accounted for and categorized, with a consistent result:
“Data Provided: 0”, not a single request has resulted in the disclosure of user information.
X-VPN has now made all data from 2017 through November 2025 publicly available in one place, with a clear commitment to continuous updates.
Each request is broken down by year, request type, and response outcome, offering transparency not just in policy, but in operational history.
In terms of diagnostics, the system collects only non-identifiable performance-related metrics, such as CPU usage, memory consumption, and service availability, used strictly for infrastructure monitoring.
These metrics contain no user-level identifiers and cannot be tied back to individual activity.
By making both policy and data practices publicly visible, X-VPN’s transparency page shifts from reassurance to verifiability, allowing users to assess privacy promises against real-world disclosures.
X-VPN’s new Transparency Report Page doesn’t stop at legal request statistics, it also opens a window into how the service performs and scales behind the scenes.
Among the key disclosures is average global bandwidth, which reflects X-VPN’s ability to serve users at speed and scale.
From just 80Gbps in 2017 to 386Gbps in 2025, the bandwidth footprint has grown nearly 5x over the past eight years. This increase supports rising user demand while minimizing congestion and performance drops.
In parallel, the report shows average daily concurrent connections, offering rare visibility into how many users the infrastructure supports at any given time.
As of November 2025, the network handles over 10 million daily average active connections, up from just 1.6 million in 2017.
To further clarify its infrastructure capacity, X-VPN has also disclosed yearly server counts. In 2025, the active server total reached 42,000, up from 12,000 in 2017.
The increase reflects a long-term strategy to reduce latency, distribute load, and improve redundancy across its global network.
These metrics are updated regularly and made visible in chart form, providing not only a historical perspective but also ongoing visibility into service health and scale.
By publishing this data, X-VPN demonstrates that performance claims are backed by verifiable figures, not just marketing.
As part of its transparency initiative, X-VPN now publicly discloses the results of its long-running bug bounty program, listing both the types of vulnerabilities reported and their resolution status.
The report includes data from 2017 through November 2025, broken down by category. All disclosed bugs have been marked as “Solved,” and span a range of attack surfaces: from client-side input validation to server configuration and authentication controls.
By publishing these results, X-VPN offers a rare window into how it handles real-world security challenges, rather than just stating it performs “regular security checks.”
More importantly, the inclusion of bug types helps external reviewers understand where vulnerabilities have historically appeared, and how the team has prioritized fixing them.
This approach highlights X-VPN’s commitment to responsible disclosure, proactive patching, and public accountability, whether or not a vulnerability ever made it to the headlines.
Beyond traffic and performance figures, X-VPN has also published the physical metrics that power its infrastructure: from per-server RAM and CPU cores to server control practices across its global network.
The new data shows how X-VPN has consistently scaled its server hardware to match user growth and bandwidth demands. In 2017, the average physical server ran with just 8GB of RAM and 2 cores.
As of 2025, that number has increased to 128GB of RAM and 24 physical cores per machine, reflecting nearly a 16x increase in memory and 12x in compute capacity.
In parallel, X-VPN has begun upgrading parts of its fleet to 10Gbps-capable servers, designed to deliver lower latency and smoother streaming even during global peak hours.
Importantly, the report also clarifies the hosting and access model used across all servers. X-VPN maintains full control over software, encryption, and remote access policies.
This mitigates supply chain risks and ensures consistency across environments, especially in jurisdictions with limited infrastructure ownership options.
By revealing the internal specs and control model of its server stack, X-VPN adds a layer of transparency that most VPN vendors never touch: what machines are really running your traffic, and who controls them.
As part of its broader transparency efforts, X-VPN has now fully disclosed all protocols currently in use, including open-source options like WireGuard and OpenVPN, alongside its own in-house protocols.
Users can now view the complete list of supported protocols inside the app’s protocol settings interface. Each protocol option is named clearly and includes descriptions of its intended use case:
The legacy references to “Protocol A/B/C” have been officially deprecated and no longer appear in any current product interfaces or documentation.
In practical terms, this means users, especially those with strong preferences around encryption design or performance, can now make informed decisions about which protocol to use and why. More importantly, they can confirm that widely trusted, open-source options are available and supported.
This move doesn’t just clarify how traffic is encrypted: it gives researchers, auditors, and power users a verifiable view into the VPN’s core functionality, helping dispel the myth of the “black box tunnel.”
Instead of relying on static privacy statements, X-VPN has committed to regularly updating its data across multiple dimensions.
These updates are not tucked away in annual whitepapers or gated behind press events. They’re hosted on a public-facing page, visible to users, reviewers, and researchers at any time.
More importantly, the data is structured: not just presented in summary form, but broken down year over year, issue by issue. That structure makes verification easier, trend analysis possible, and trust measurable.
X-VPN is a global privacy and security service operated by LIGHTNINGLINK NETWORKS PTE. LTD., based in Singapore.
With over 10,000 servers across 80 countries, X-VPN provides encrypted internet access using AES‑256 encryption, supporting users in protecting data, and maintaining anonymity online.
The company enforces a strict No-Logs Policy, ensuring that no identifiable data is ever stored or shared.
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…