OpenVPN Access Server vs Outline VPN (Outline Foundation, ex-Jigsaw/Google): which wins in 2026?
Head-to-head on the facts that decide the purchase: real prices in the provider's own unit, minimum, KYC, proof, payment and terms - every number sourced in the linked reviews.
The incumbent of self-hosted business VPNs, and still a safe pick in 2026 - with one honest fork in the road. Access Server is the polished, supported way to run OpenVPN on your own hardware: web admin UI, one-click client provisioning, MFA, SAML/RADIUS/LDAP, clustering and now DCO kernel acceleration, with a genuinely usable free tier of 2 simultaneous connections (verified live 2026-11-03). The community edition underneath is the same GPLv2 protocol with no connection limit but no UI - and r/OpenVPN threads still open with users confused about exactly this split, which the company could document better. The audit record is unusually strong for 25-year-old C code: Quarkslab 2017, Trail of Bits 2022-2023 (no significant flaws), and a 2026 SRLabs audit of 2.7 release candidates that found 18 issues including one critical unauthenticated-DoS logic inversion - fixed before release, which is the system working, but a reminder that 'audited since 2017' is not 'bug-free'. Costs scale per connection and get 'stupid expensive' for medium-sized teams by community consensus, Pritunl and WireGuard/Headscale are the usual escapes, and OpenVPN remains trivially detectable by DPI - this is a remote-access tool, not an anti-censorship tool.
The most polished way to hand censorship-resistant access to people who cannot configure a VPN: a few clicks in the Outline Manager builds a Shadowsocks server on a $3-6/month VPS, and family, newsroom or NGO members connect with ss:// access keys - which is why it powered Sudan protests, Myanmar crisis access and Iranian traffic spikes. It is the mirror image of Algo: audited four times with real obfuscation (WebSocket-over-TLS, prefixes, SDK strategies) but running a proxy, not a true VPN - no kill switch, no split tunneling on Linux, no anonymity, and your server's operator (you, or whoever you gave a key to) sits inside the trust boundary. Watch items: the server code has not had a tagged release since v1.12.3 in February 2025 while clients moved to the new non-profit, and the 2022 audit's high-severity findings were concentrated in the neglected Linux client.
Short answer: too close to call (4.7/10 and 4.7/10). The deciding factor is your priority: OpenVPN Access Server for honest value, Outline VPN (Outline Foundation, ex-Jigsaw/Google) for privacy & logging. Facts checked 2026-11-05.
The facts
 OpenVPN Access Server | Outline VPN (Outline Foundation, ex-Jigsaw/Google) | |
|---|---|---|
| Overall score (0-10) | 4.7 | 4.7 |
| Privacy & proof | ||
| Logging claim | You are the operator: Access Server runs on your own Linux host, VM, Docker container or… | getoutline.org how-it-works (fetched 2026-11-03): 'It never logs your traffic or tracks… |
| Logging evidence | no logging claim at all | promise only (no proof) |
| Audits | SRLabs (Security Research Labs), sponsored by Sovereign Tech… moreSRLabs (Security Research Labs), sponsored by Sovereign Tech Agency and Open Technology Fund 2026, Trail of Bits 2023, QuarksLab, coordinated by OSTIF (funded by a 33-company coalition) 2017, Dr Matthew Green (Johns Hopkins), commissioned by Private Internet Access 2016 | Radically Open Security 2018, Cure53 2018, Radically Open Security 2022, Cure53 2024 |
| Jurisdiction | United States - OpenVPN Inc., Pleasanton, California (about… moreUnited States - OpenVPN Inc., Pleasanton, California (about page fetched 2026-11-03); a Five Eyes member country | United States - Outline Foundation, 30 N Gould St. #57975, S… moreUnited States - Outline Foundation, 30 N Gould St. #57975, Sheridan, Wyoming (contact address in Terms of Service and on the Google Play developer listing); ToS governed by Wyoming law. The software itself has no jurisdiction: the operative jurisdiction for a self-hosted user is wherever their rented VPS is located and the laws governing their cloud provider. |
| Owner | unknown | unknown |
| Money | ||
| Intro price | $7 /mo | $3 /mo |
| Renewal price | $7/mo | not published |
| Anonymous payment | fiat | fiat |
| Account | ||
| Personal info | email account required | none for the software - no Outline account exists; access ke… morenone for the software - no Outline account exists; access keys are generated and shared without any registration. Your cloud provider (DigitalOcean, AWS, GCP) will require billing identity under their KYC. |
| Kind | Self-hosted | Self-hosted |
| Facts checked | 2026-11-03 | 2026-11-03 |
Score breakdown
OpenVPN Access Server leads on honest value (+5) · Outline VPN (Outline Foundation, ex-Jigsaw/Google) leads on privacy & logging (+2), censorship resistance (+2).
OpenVPN Access Server at a glance
++ What holds up
- Free forever for 2 simultaneous connections with every feature enabled, no card required (live pricing page 2026-11-03)
- Working web admin console out of the box - the most complete UI among self-hosted options by a distance (Meetrix 2026 comparison), and HN users report 10-minute DigitalOcean deployments
- Unusually deep audit history for VPN server code: Quarkslab/OSTIF 2017, Matthew Green crypto review 2016/2017, Trail of Bits 2022-2023, SRLabs 2026 - all with public reports
- Enterprise auth stack on every tier: PAM, LDAP, RADIUS, SAML/SSO, TOTP MFA, certificate auth, device registration (live feature table)
- One subscription covers clustered high-availability nodes; per-connection (not per-user) licensing, connections added or removed with prorated credit (2022 pricing page, fetched via Wayback)
-- What to watch
- Connection-based pricing adds up fast: $7/connection/month billed yearly (calculator verified live 2026-11-03); HN in 2021 already called it 'around $50 a month for more than 2 clients' and r/OpenVPN users call medium-size scaling 'stupid expensive'
- Access Server itself is closed source - the GPLv2 open-source part is the community edition daemon; no access-server repo exists in the OpenVPN GitHub org (checked via GitHub API 2026-11-03)
- OpenVPN is trivially detected and blocked by DPI; no obfuscation layer beyond TCP-443 disguise (Wikipedia + r/selfhosted thread, fetched 2026-11-03)
- The 2026 SRLabs audit found 18 issues in 2.7 release candidates including a critical unauthenticated DoS introduced in May 2022 that survived two prior audits and years of oss-fuzz
- Subscription activation requires reaching OpenVPN licensing servers - a dependency for airgapped-ish setups unless on the Free plan (support docs describe licensing-server connectivity troubleshooting)
Outline VPN (Outline Foundation, ex-Jigsaw/Google) at a glance
++ What holds up
- Genuinely censorship-resistant: handshake-less Shadowsocks, mandatory AEAD ciphers, probing resistance, plus Shadowsocks-over-WebSockets behind TLS and 16-byte protocol disguises (client 1.15.0+/1.9.0+)
- Four published independent audits: Radically Open Security (2018, 2022) and Cure53 (2018, 2024), reports downloadable from getoutline.org - rare transparency at any price
- Non-profit stewardship since January 2026: Outline Foundation (Sheridan, Wyoming) with internet-freedom leadership, freeing it from the Google/Jigsaw association that some privacy users distrusted
- Near-zero friction for non-technical admins and users: point-and-click Manager, ss:// keys shared by email/SMS, per-key data limits, clients on every major platform (5M+ Play installs)
- No operator: Foundation 'does not operate VPN servers, does not route internet traffic, does not log VPN traffic, does not monitor connections' (ToS section 2, fetched 2026-11-03)
- Scale and field record: 30M+ monthly users, 140,000+ self-managed servers, documented use in Sudan, Myanmar, Iran and Ukraine crisis events
-- What to watch
- It is a Shadowsocks proxy, not a true VPN: no kill switch documented, no split tunneling on Linux, and per HN critics the per-application SOCKS design historically allowed traffic leakage outside the tunnel
- Shadowsocks is detectable under sustained scrutiny: China's GFW identified Shadowsocks servers as early as 2018 (GitHub issue #193) and 2025 client releases were frozen within ~5 minutes by Russian censors (issue #2679)
- Server releases have stalled: last tagged server version v1.12.3 shipped February 2025 - about 20 months without a release while clients iterate (The Proof Desk, 2026-10-31)
- Not an anonymity tool, by its own FAQ; websites 'will most likely be able to tell that your connection is coming from a cloud server', so streaming unblocking is hit and miss
- Trust moves to whoever runs the server: 'Someone with your access key could potentially inspect all your internet traffic if they have access to it' (project warning); public free-key lists are explicitly not affiliated and commonly dead or malicious
- Requires a cloud account and its KYC; the Manager is Windows/macOS/Linux only, so pure-mobile users cannot self-host
Full Outline VPN (Outline Foundation, ex-Jigsaw/Google) review →
FAQ
Which is cheaper, OpenVPN Access Server or Outline VPN (Outline Foundation, ex-Jigsaw/Google)?
Outline VPN (Outline Foundation, ex-Jigsaw/Google) is cheaper at $3 /mo versus $7 /mo.
Which has better logging evidence, OpenVPN Access Server or Outline VPN (Outline Foundation, ex-Jigsaw/Google)?
Outline VPN (Outline Foundation, ex-Jigsaw/Google) has the stronger logging evidence; OpenVPN Access Server makes no no-logs claim at all.
Which renewal price is honest, OpenVPN Access Server or Outline VPN (Outline Foundation, ex-Jigsaw/Google)?
OpenVPN Access Server documents renewal at $7/mo; Outline VPN (Outline Foundation, ex-Jigsaw/Google) is free - no renewal price exists.
Which needs less KYC, OpenVPN Access Server or Outline VPN (Outline Foundation, ex-Jigsaw/Google)?
At least one provider does not document its KYC policy - treat it as unknown, not as "no KYC".
Which has the longer track record?
OpenVPN Access Server has the longer track record (since 2002).
Scores and facts: meta-reviews with dated sources - OpenVPN Access Server · Outline VPN (Outline Foundation, ex-Jigsaw/Google). Method: how we verify. More: all providers compared · all head-to-heads.