Security News > 2023 > November > Google Play adds security audit badges for Android VPN apps

Google Play, Android's official app store, is now tagging VPN apps with an 'independent security reviews' badge if they conducted an independent security audit of their software and platform.
Starting with VPN apps, which Google considers critical for user privacy and security due to handling sensitive data, the Play Store will display the "Independent security review" badge in the Data Safety Section.
For this new Google Play tag, VPN vendors are also required to perform the MASA audit from an approved cybersecurity partner.
The VPN vendors that have opted to go through the MASA security audit and currently display the new Google Play badge are NordVPN, Google One, and ExpressVPN. Other VPN apps that hold a valid MASA certificate but haven't received a Google Play badge yet are Aloha Browser + Private VPN, Private Internet Access VPN, SkyVPN - Fast Secure VPN, Tomato VPN, and vpnify - Unlimited VPN Proxy.
Additional technical details about the MASA assessment for these apps can be found in this directory, containing the MASA certifications for the mentioned VPN apps.
It is anticipated that a growing number of VPN apps will join this initiative shortly, helping foster greater transparency on Google Play.
News URL
Related news
- SpyLend Android malware downloaded 100,000 times from Google Play (source)
- Google's March 2025 Android Security Update Fixes Two Actively Exploited Vulnerabilities (source)
- New North Korean Android spyware slips onto Google Play (source)
- Malicious Android 'Vapor' apps on Google Play installed 60 million times (source)
- Week in review: Exploited 7-Zip 0-day flaw, crypto-stealing malware found on App Store, Google Play (source)
- Google Confirms Android SafetyCore Enables AI-Powered On-Device Content Classification (source)
- Beyond VPN: How TruGrid Simplifies RDP Deployment, Security, and Compliance (source)
- Google Chrome's AI-powered security feature rolls out to everyone (source)
- Qualcomm pledges 8 years of security updates for Android kit using its chips (YMMV) (source)
- How Google tracks Android device users before they've even opened an app (source)