TunnelBear 评测

After undergoing the first challenging security test which ended with several critical & high severity findings, the TunnelBear team seems to have redoubled efforts on security.

Experts discovered that the browser extension VPN could easily be turned off by getting the targeted user to access a specially crafted webpage.

Cure53, a respected security company, to do a complete audit of our servers, apps and infrastructure.

All in all, the security at TunnelBear has once again improved by leaps and bounds.

they discovered 2 “critical”, 5 “high”, 3 "medium", 7 "low", and a few "informational" issues - all of which were promptly fixed.

the security posture of the tested TunnelBear components is sound and generally solid.

In total, Cure53 found 2 Critical, 4 High, 1 Medium, 2 Low and 3 Informational issues-which were all fixed promptly.

The testing team was unable to spot Critical issues during this 2020 exercise. Only one flaw was graded as a High risk, while the remaining problems were located in the realm of Medium and lower severity scores.

after 40 days of testing, Cure53 found two low, two medium and one high-risk vulnerability.

The Critical-assigned issues have increased in addition, with three unearthed during this report. Similarly, the volume of High severity-rated issues (also three) has risen in comparison with previous engagements.

Cure53 found four low, nine medium, three high, and three critical-risk vulnerabilities.

The fact that two Critical ranked vulnerabilities and eight High severity issues were unveiled during this assessment compounds this worrisome viewpoint.

Upon completion of their audit, Cure53 flagged a total 32 issues.

some flaws located in prior audits have either been incorrectly resolved or simply ignored, which are all congregated in ticket TB-11-005.

Specifically, Cure53 reported a total of 6 informational/low-risk issues, 5 medium-risk issues, 2 high-risk issues, and 0 critical-risk issues.

The Critical-assigned issues have increased in addition, with three unearthed during this report. Similarly, the volume of High severity-rated issues (also three) has risen in comparison with previous engagements.

Cure53 found four low, nine medium, three high, and three critical-risk vulnerabilities.

The fact that two Critical ranked vulnerabilities and eight High severity issues were unveiled during this assessment compounds this worrisome viewpoint.

Upon completion of their audit, Cure53 flagged a total 32 issues.

some flaws located in prior audits have either been incorrectly resolved or simply ignored, which are all congregated in ticket TB-11-005.

Specifically, Cure53 reported a total of 6 informational/low-risk issues, 5 medium-risk issues, 2 high-risk issues, and 0 critical-risk issues.

It's been some time since our last Transparency Report in 2021.

Pentest-Report TunnelBear VPN Clients & Servers 10-11.2023

Security giant McAfee is acquiring Canadian VPN provider TunnelBear. Terms of the deal haven’t been disclosed.

But TunnelBear is based in Canada, which could be an issue if you’re trying to avoid intelligence services.

As TunnelBear LLC, we are now part of a security company based in the United States, but our offices are still located in Toronto.

Since TunnelBear is located in Canada, we have to obey Canadian data laws. If we receive a subpoena, we’re obligated to respond and cooperate to the best of our ability.