Skip to main content
Founder & Lead Security Researcher 7+ years in cybersecurity VPN protocol analysis

Josh Williams

Founder and lead security researcher at VPN Security Blog. I review VPNs, publish the comparison data, and explain the gap between the marketing claim and the comparison result.

What I do

I run VPN Security Blog, an independent testing and privacy publication. I buy VPN subscriptions with my own funds, run standardized speed, leak and streaming tests, and publish the methodology and comparison data alongside the reviews. The goal is simple: give readers the evidence they need to choose a VPN without relying on affiliate rankings or vendor claims.

My background is in cybersecurity, VPN protocol analysis and penetration testing. I focus on the parts of a VPN that are easy to market and hard to verify: no-logs claims, audit scope, jurisdiction, leak protection, and what actually happens to your throughput when the tunnel is on.

What I publish

VPN Benchmark Matrix

Throughput retention, post-quantum support, RAM-only status, audit history, jurisdiction and pricing for five providers, with a summary CSV and changelog.

View the benchmark →

VPN Pricing Index

Intro prices, upfront totals, renewal rates and refund windows for six providers, from provider pages and updated monthly.

View the pricing index →

WebRTC & IP Leak Test

A free client-side tool that checks WebRTC, DNS and IPv6 leaks. No signup, embeddable in any guide.

Run the leak test →

Post-Quantum VPN Research

A technical draft on ML-KEM/Kyber-768 hybrid handshakes, WireGuard overhead and the transition to post-quantum VPNs.

Read the research →

How I review

Every provider is reviewed in our editorial comparison, on a clean Windows 11 client, using its recommended WireGuard-based protocol. I compare published speed data and document the limitations.

Streaming is reviewed against Netflix, Hulu, Disney+ and BBC iPlayer. Pricing is checked against the provider's checkout, and renewal terms are recorded separately from the introductory rate. The limitations are published with the data: one client, one network, one region per cycle. The results describe relative performance, not a guaranteed speed for your connection.

Read the full methodology →

Editorial standards

  • We buy VPN subscriptions with our own funds unless a provider supplies a review account, which we disclose.
  • Affiliate commissions do not influence rankings, scores or verdicts.
  • We publish methodology, comparison data and limitations alongside our benchmarks.
  • We correct factual errors publicly and date every update.
  • We do not accept paid placements, sponsored rankings or undisclosed advertising.

Recent work

Contact

For press, data requests or corrections: Admin@VpnSecurity.blog.

For the media kit and citation guidance, see the Press & Data Center.

NordVPN - audited no-logs VPN Get deal →