Mullvad aces security audit with this new privacy tool

Mullvad’s Leta doesn’t contains any significant risks for users

When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.

After recentlyproving its no-log policyin spite of a police raid in Sweden,Mullvadgave demonstrated strong security infrastructure offered by itsVPN serviceonce again.

This time it was its new search engine tool Leta which underwent an independent review by audit firm Assured AB.

Auditors were called to assess both the security and privacy posture of the new tool. Leta aced the review with no significant issues found.

Mullvad’s Leta security report

Mullvad’s Leta security report

“Overall, Mullvad Leta is well contained with a small attack surface, and good measures have been implemented to strengthen privacy as well as security,” theaudit’s reportconcluded.

Auditors performed both a web application penetration test and a web security review of Leta, the new privacy-focusedGooglesearchproxydeveloped by Mullvad and available for all itsVPNusers at no extra cost.

They found a total of two low-risks privacy issues related to logging and search query caching, as well as one potential security flaw linked with Google search results' HTML content being rendered in the Leta search results.

The provider reassured it had already begun work on carry out the auditors' recommendations.

Are you a pro? Subscribe to our newsletter

Are you a pro? Subscribe to our newsletter

Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!

Security audit of our https://t.co/iHfLAoSVrz search service https://t.co/L6GLNM0j2xMay 16, 2023

Leta is also an option to use withMullvad Browseras a default search engine. First released on April 3, the latter seeks to offer users all the privacy and security ofthe Tor Browser, together with all the perks ofsecure VPNsoftware.

“Leta aims to present a reliable and trustworthy way of searching privately on the internet,“explains the provider.

Using such a tool is pointless, though, when combined with a private web browser that blocks fingerprinting, cookies and otherweb trackers.

“For most people Leta can be useful, as the above conditions cannot ever truly be met by systems that are available today.”

This proves more promising still when you consider that Leta’s privacy and security have finally been verified.

Chiara is a multimedia journalist committed to covering stories to help promote the rights and denounce the abuses of the digital side of life—wherever cybersecurity, markets and politics tangle up.She mainly writes news, interviews and analysis on data privacy, online censorship, digital rights, cybercrime, and security software, with a special focus on VPNs, for TechRadar Pro, TechRadar and Tom’s Guide. Got a story, tip-off or something tech-interesting to say? Reach out to chiara.castro@futurenet.com

3 reasons why PIA fell in our best VPN rankings

Is it still worth using Proton VPN Free?

I fell in love with the cute and compact Hyundai Inster, but it has one major drawback