Warrant canary

The mechanism, in one paragraph

A canary converts "we cannot tell you" into something observable. The provider publishes a dated, signed statement saying no secret orders have arrived; removing it is not prohibited, so the absence becomes the message. 3 providers match this page's filter, and 3 of the providers on this page currently publish one - in our whole ranking, that single digit tells you how niche the practice has become.

The one death on record

In June 2016, Proxy.sh withdrew an entry from its warrant canary and hinted - as loudly as its lawyers allowed - that a gag order had arrived[1]. It remains the only clean, documented canary death in the industry's history. Every other canary story is a non-event in the wrong direction: canaries that simply stopped, without announcement or explanation. That asymmetry matters - a canary can fail loudly once per provider, or fail silently forever, and only the first case is informative.

What a canary can and cannot promise

Read the scope. A canary that says "we have received no national security letters" says nothing about a foreign court order; a canary attached to a court-proven architecture says both. PIA pairs its canary[2] with quarterly transparency reports; IVPN pairs its canary[3] with the strongest verification story in the industry. Neither promise overlaps with the logging question - the canary tells you about the subpoena drawer, not the log drawer.

The company a canary keeps

A canary is only as interesting as what it sits next to. PIA pairs its signed canary page[2] with quarterly transparency reports naming every legal request; IVPN pairs its canary[3] with verification instructions and an annual audit record. The canary works as part of a stack - evidence class underneath, transparency reporting around it, the canary on top. A standalone canary on a policy-only provider is a decoration on an unproven claim, and the no-logs hub shows how those claims have failed before.

Why we do not score silence as guilt

A lapsed canary has at least three innocent explanations - reorganization, laziness, a legal team's caution - and one alarming one. The proxy signal can be inverted in a noisy channel, as the canary literature itself argues[5]. Our engine records the canary's existence and freshness per provider; it never upgrades or downgrades a provider's evidence class on a canary alone. If the alarm matters to your threat model, the IVPN verification guide[3] is the template for doing the check yourself, the incidents timeline tracks every documented gag-order case in the industry, and the ownership map shows who ultimately answers for the drawer the canary guards.