A competent mid-market VPN with an unforgivable resume. The 2026 product is genuinely rebuilt: 103 countries (up from 34), dedicated P2P servers, WireGuard plus the proprietary Mimic protocol that still works from mainland China, Double VPN, IP Rotation, post-quantum encryption, streaming that opened eight Netflix regions in independent testing, near-zero speed loss on nearby servers, and a 60-day free trial - all verified against the live operator pages and 2026 reviews. The price mechanics are the classic antivirus-funnel pattern: no monthly plan, $3.99/month teasers on 2-3 year lock-ins, then a $99.99/year renewal - a 67-109% jump on the same page that advertises the savings. The trust side is where the dossier gets heavy: this is the company whose antivirus harvested users' browsing histories from 2014 to 2020 and sold them, in re-identifiable form, to more than 100 clients through its Jumpshot subsidiary - including Google, Microsoft, Pepsi, Home Depot and Omnicom at $2M+ a year - while its marketing promised to block tracking. The CEO's response ('both Avast and Jumpshot acted fully within legal bounds') became a case study in non-apology, the Czech DPA opened a preliminary investigation, and in February 2024 the FTC fined Avast $16.5 million and banned it from selling browsing data for advertising. Since then: still no independent no-logs audit, servers on rented Amazon EC2 instances that write to disk, and a transparency report that counts customer service tickets but not law-enforcement demands. Everything rests on a policy document written by the company the FTC had to fine. Fine product, structurally unproven privacy.
7 red flagsfacts verified - avast.com SecureLine product page, avast.com/en-us/vpn-policy, avast.com/en-us/privacy-policy, support.avast.com SecureLine VPN FAQ (updated 2026-10-16), Gen Digital newsroom, Gizmodo review + rename article, The Proof Desk review, Wikipedia (Avast, Avast Premium VPN, Gen Digital), Vice/Motherboard 2020 investigation, FTC press release, TechCrunch 2020, The Verge 2024, uk.pcmag.com 2020, HN Algolia API and the arctic-shift Reddit archive (r/antivirus) all fetched live 2026-11-02. Note: avast.com and pcmag.com block the default fetcher (403) but were retrieved with a browser user-agent via curl; arctic-shift body-text search for subreddit=VPN returned 422 timeouts all session, so Reddit voices came from r/antivirus plus HN.
outbound link - direct to the provider, no affiliate parameters
site reachable (bot-protected) · checked 19 h ago · daily check
Red flags (7):
JUMPSHOT BROWSING-DATA RESALE (2014-2020): Avast's antivirus and browser extensions collected users' web histories and fed them to subsidiary Jumpshot, which sold granular, re-identifiable clickstreams to 100+ clients (Vice/Motherboard + PCMag joint investigation, Jan 27 2020, based on leaked contracts and data; Omnicom paid $2.075M for 2019 access to an 'All Clicks Feed' covering 14 countries; clients included Google, Yelp, Microsoft, McKinsey, Pepsi, Home Depot, Condé Nast, Intuit; Jumpshot's pitch: 'Every search. Every click. Every buy. On every site.'); Senator Wyden intervened; Avast announced the wind-down Jan 30, 2020 while the CEO insisted 'both Avast and Jumpshot acted fully within legal bounds'; the Czech DPA opened a preliminary investigation Feb 11, 2020
FTC ENFORCEMENT (Feb 2024): $16.5 million civil penalty and consent order - the FTC found Avast sold 'detailed, re-identifiable browsing data' (including sites revealing religious beliefs, health concerns, political leanings and visits to child-directed content) to 100+ third parties while marketing its software as a tracker blocker; the order bans selling Avast-branded browsing data for advertising, requires deletion of Jumpshot data and derived algorithms, customer notification, and an annual compliance audit; refund notices went out February 2025 (FTC press release fetched 2026-11-02; Wikipedia records settlement notices Feb 2025)
NO INDEPENDENT AUDIT, EVER: multiple 2026 reviews (Gizmodo: 'Avast has not been audited'; The Proof Desk) find no third-party examination of the no-logs policy, apps or infrastructure - the audit gap stacked on top of the Jumpshot record
+4 more red flags - expand before signing up
GEN DIGITAL MEGA-MERGER: Avast was acquired by NortonLifeLock in an $8.1B deal completed September 2022 (UK CMA-cleared) and the combined company became Gen Digital - one Fortune 500 company now owns the Avast, AVG, Avira, Norton, LifeLock, ReputationDefender, MoneyLion and CCleaner brands plus at least three consumer VPNs (Avast/AVG VPN, Norton VPN, HMA), several built on the same Avast engine; the FTC's order reached back to products 'as of September 12, 2022' to cover the merged entity
PATTERN OF DATA-MONETIZATION CONTROVERSIES beyond Jumpshot: late 2019 Avast/AVG browser extensions were caught harvesting browsing data and pulled from Chrome, Firefox and Opera stores (with a Mozilla blocklist fight); HN users dug up Avast's own analyst presentation showing 17% of revenue from 'user data monetization'; the 2017 CCleaner backdoor incident (Piriform, an Avast acquisition) and a 2014 forum breach of 400K accounts sit in the same corporate history
TRANSPARENCY GAP: the quarterly transparency report counts 4,941 customer privacy requests (mid-2025) but does not report law-enforcement demands, warrants or gag orders (Gizmodo); no warrant canary
RENAME TIMING: October 2026 the brand shed the 'SecureLine' name for 'Premium VPN' inside the Avast One platform (Gizmodo: 'SecureLine Is Dead, Long Live Avast Premium VPN') - the legacy name is now permanently attached to the Jumpshot era in community memory
The renewal trap: the advertised $3.99 /mo is the intro rate - it renews at $8.33/mo (2.1x). Check the 3-year total before any multi-year plan.
Review
draft generated by Qwen3, fact-checked by the vpncomparison editorial desk · review version 3 · prose updated 2026-11-02 · facts as of 2026-11-02 · how we verify
Honesty note: we have not run our own tests on Avast SecureLine VPN yet (leak tests, speed, kill switch). Everything on this page is source-based meta-research with dated links. When we test it, results appear here and on the change log.
Overview
Avast SecureLine VPN homepage - live capture 2026-09-29
Avast SecureLine VPN, now rebranded as Avast Premium VPN and folded into the Avast One platform, is a commercial antivirus-bundled VPN operated by Avast Software s.r.o. in Prague and owned by Gen Digital Inc. (NASDAQ: GEN). Despite a 2026 product refresh with strong features and censorship circumvention, its privacy credibility remains undermined by a documented history of user data monetization, including the Jumpshot scandal and a $16.5M FTC penalty.
Logging & privacy
Avast claims it does not log originating IP addresses, DNS queries, browsing history, or transferred data. However, it retains connection logs (duration, timestamps, bandwidth), server metadata (location, protocol, server IP) for up to 18 months, and crash reports for 90 days - some of which may be linkable to user accounts. The logging evidence is "policy-only"; no independent audit has ever verified these claims. Jurisdiction is split: the Czech Republic (EU/GDPR) for Avast Software, but ultimate control lies with Gen Digital, a U.S. Fortune 500 company. No warrant canary exists, and the transparency report covers only customer service requests, not law enforcement demands.
Pricing & the renewal trap
The lowest advertised rate is $3.99/month, available only on 2- or 3-year plans ($95.76 or $143.64 upfront). There is no monthly plan. After the initial term, renewal jumps to $99.99/year - equivalent to $8.33/month, a 2.1x increase over the intro rate. The 30-day money-back guarantee applies, but the lack of ongoing flat pricing means long-term users face a steep renewal trap. A 60-day free trial requires payment details and auto-converts unless canceled.
Avast supports WireGuard, OpenVPN (UDP/TCP), IPsec (Apple), and its proprietary Mimic protocol with default post-quantum encryption. It offers a kill switch, split tunneling, multihop (Double VPN), IP rotation, and dedicated P2P servers in eight cities. Streaming access was confirmed across eight Netflix regions in 2026 testing. Servers span 103 countries, but the exact count is unverified. No Linux, router, or TV apps are available. Performance tests show minimal speed loss on nearby servers, and Mimic successfully bypassed censorship in mainland China.
Ownership & track record
Avast is a brand under Gen Digital Inc., which also owns Norton, AVG, Avira, CCleaner, and HMA - many sharing Avast’s engine. The company’s track record is marred by the Jumpshot scandal (2014-2020), where browsing data from antivirus users was sold to over 100 companies, including Google and Microsoft. The FTC fined Avast $16.5M in 2024 and banned it from selling browsing data for advertising. Despite product improvements, community sentiment remains negative, citing aggressive upselling, past privacy violations, and lack of independent audits.
Censorship resistance
Avast’s proprietary Mimic protocol is designed for censored networks and was confirmed to work from Shenzhen, mainland China, in 2026 testing. With post-quantum encryption enabled by default on Mimic, it offers a viable option for users in high-censorship regions. However, the lack of open-source protocols and reliance on a company with a history of data misuse raises trust concerns for high-risk users.
Verdict
Avoid Avast SecureLine/ Premium VPN if privacy is your priority - its FTC enforcement history, lack of independent audits, and data monetization past make trust unearned. It may suit mainstream users who want streaming access and censorship bypass within an antivirus bundle and are comfortable with the $3.99/month intro price jumping 2.1x at renewal. Gen Digital does not appear to pay review sites directly, but affiliate links exist on tech media covering the product.
++ What holds up
2026 feature catch-up verified across operator pages and reviews: 103 countries, WireGuard + Mimic + OpenVPN + IPsec, Double VPN, IP Rotation, split tunneling, post-quantum toggle, 10 devices
Streaming actually works - eight Netflix regions, BBC iPlayer, HBO Max, Pluto, Channel 4, Tubi, Hotstar opened on ordinary servers in Gizmodo's August 2026 tests
Mimic obfuscation connected from mainland China (Shenzhen) in July 2026 testing - a short list of providers
Nearby-server performance is excellent: 1.9% download loss via London on a 190 Mbps line; clean DNS/IPv6/WebRTC leak tests
Genuine 60-day free trial at $0 checkout with a 7-day reminder, plus a 30-day money-back guarantee starting from the first charge
Renewal math at $99.99/year for 10 devices ($10 per device) is fair for the premium tier - the intro pricing is where the games are
-- What to watch
No monthly plan at all - 1 year is the shortest term ($59.88 minimum purchase)
Renewal shock is the business model: $59.88 first year then $99.99 (+67%); 2/3-year buyers jump +109% at renewal; the 3-year plan costs the same per month as the 2-year
No independent no-logs or security audit has ever been published (Gizmodo, The Proof Desk) - policy-only evidence in a dossier-heavy industry of repeated audits
Connection logs are stored for 12 months, server/application metadata for 18 months, account email for lifetime + 2 years - not a zero-retention VPN and Avast does not claim to be one
Servers resolve to Amazon EC2 instances and write to disk - a generation behind the RAM-only standard (Gizmodo)
No Linux client, no router/TV apps yet (TV apps pending end-September 2026), no port forwarding, no dedicated IP - weak for seeders and self-hosters
Asian servers are weak: 48% download / 55% upload loss to Tokyo in testing
Transparency report omits law-enforcement demands, warrants and gag orders - it covers customer requests only
Pricing reality check
Intro price
$3.99 /mo · renews $8.33/mo
Renewal price
$8.33/mo 2.1x intro
Refund window
30 days
Notes
The true-cost story: a 1-year buyer pays $59.88 then renews at $99.99 - a 67% jump; 2- and 3-year buyers average $47.88/year in the first term and then hit the same $99.99 renewal - a 109% jump (Gizmodo's arithmetic on the operator's own numbers). The 3-year plan buys nothing: same $3.99/month as the 2-year. At full price $99.99 covers 10 devices ($10 per device).
Check the renewal price above before any multi-year plan - true-cost calculator.
Is Avast SecureLine VPN legit?
Avast SecureLine VPN is operated by gen-digital. Logging claim: VPN Policy (last updated May 7, 2026, fetched live): 'Data we don't send to our servers. Period.' - lists Originating IP address, Any DNS queries while connected, Browsing history, and Transferred data. Product page: 'We don't log activity that could be traced back to you.' Support FAQ: 'We do not log activity such as the websites you visit, what data is transferred, and which IP addresses are accessed' - while admitting 'Avast VPN stores connection logs, which include information such as the time you connect and disconnect, the duration of the connection, and bandwidth usage.' - evidence class: promise only (no proof). Our incident log carries 1 documented incident(s) for this operator - see the record below. Facts verified - avast.com SecureLine product page, avast.com/en-us/vpn-policy, avast.com/en-us/privacy-policy, support.avast.com SecureLine VPN FAQ (updated 2026-10-16), Gen Digital newsroom, Gizmodo review + rename article, The Proof Desk review, Wikipedia (Avast, Avast Premium VPN, Gen Digital), Vice/Motherboard 2020 investigation, FTC press release, TechCrunch 2020, The Verge 2024, uk.pcmag.com 2020, HN Algolia API and the arctic-shift Reddit archive (r/antivirus) all fetched live 2026-11-02. Note: avast.com and pcmag.com block the default fetcher (403) but were retrieved with a browser user-agent via curl; arctic-shift body-text search for subreddit=VPN returned 422 timeouts all session, so Reddit voices came from r/antivirus plus HN. (not fully verified) as of 2026-11-02 - read the sources below.
The money trail - what review sites earn by recommending this
affiliate status not verified yet
If we sign up for this program, every link here becomes rel="nofollow sponsored" and routes through /go/. Until then our links point straight to the provider's website with zero tracking. Ranking logic physically cannot read affiliate fields - here is the proof.
Incident record (1)
2024Avast fined $16.5M by FTC for selling browsing data via JumpshotAntivirus/VPN giant Avast harvested detailed browsing data from its own products and sold it via subsidiary Jumpshot (exposed Jan 2020 by PC
On the website
Captured by our screenshot bot from the live site (or its public archive). A capture is evidence of what the page showed at capture time - not an endorsement.
Avast SecureLine VPN homepage - live capture 2026-09-29Avast SecureLine VPN apps / download page - live capture 2026-09-29
Before you pay: check the renewal price, the refund window, and whether a cheaper or free path covers your use case - the honest checklist.
Based on our checks as of 2026-11-02: Avast SecureLine VPN scores 3.6/10 in our weighted review. We logged 7 red flags (listed above). User reports, ownership and the incident record are documented with dated sources in the meta-review below.
What do I actually get with Avast Premium VPN?
Access to 103 countries, WireGuard and Mimic protocols, Double VPN, IP rotation, kill switch, split tunneling, and dedicated P2P servers. No Linux or TV apps. Works with eight Netflix regions and bypasses censorship via Mimic.
What is the renewal price and total cost over three years?
The renewal rate is $99.99/year ($8.33/month), a 2.1x jump from the $3.99/month intro rate. The three-year total is $143.64 for the first term, then $99.99 annually thereafter - no long-term discount.
What evidence supports Avast’s no-logs claim?
None beyond its own policy. No independent audit has ever verified the no-logs infrastructure. The FTC found Avast sold re-identifiable browsing data as recently as 2020, and the company retains connection and server metadata for up to 18 months.
Does it work in censored countries like China or Iran?
Yes - Mimic, Avast’s proprietary obfuscation protocol, successfully connected from Shenzhen in 2026 testing. It includes post-quantum encryption by default, making it a functional tool for high-censorship environments.
Can I pay anonymously?
No. An Avast account with an email is required, and payment details (card or PayPal) are needed even for the 60-day free trial. Account data is stored for the product lifetime plus two years.
What happens if Avast shuts down or changes policy?
You lose service and any prepaid time. Given Avast’s 2022 merger into Gen Digital and the 2026 rebrand to Premium VPN, future changes are likely. No exit strategy or data portability is offered.
What’s an honest free or cheap alternative?
Proton VPN offers a permanent free tier with no data logging (court-verified), strong encryption, and limited but reliable service. For paid privacy, Mullvad or IVPN are better choices - both are independent, audited, and designed for trust minimization.
The meta-review: what the internet says about Avast SecureLine VPN
We do not expect you to trust us. This review is a meta-review: below you see what other review sites claim - with their conflicts of interest labeled - what users report on Reddit and forums, and who actually operates Avast SecureLine VPN. Every claim links to its source so you can verify it yourself.
What other reviewers say (3)
Every source carries a conflict label from our review-site database. "Affiliate-funded" means the site earns money if you buy what it recommends. We include critical voices deliberately.
Fetched 2026-11-02 (HTTP 200): 103 countries / 140+ locations; pricing table identical to the live page (renewal $99.99/yr; 1-yr buyer +67%, 2/3-yr +109% jump); no monthly plan; 60-day trial + 30-day guarantee; protocols WireGuard/Mimic/OpenVPN/IPsec; no independent no-logs audit ever; servers on Amazon EC2 that write to disk; VPN policy retention (12/18/90-day tiers); crash-report linkage clause; account email lifetime+2yr; four mobile SDKs; transparency report covers customer requests only (4,941 requests, mid-2025) not law enforcement; Jumpshot/FTC $16.5M recap; speeds London -1.9%, Ashburn -17.4%, Tokyo -48%; Netflix in 8 regions; dedicated P2P servers, no port forwarding, no Linux, no TV apps yet; Mimic worked from Shenzhen July 2026; affiliate-funded review (commission disclosure on page).
Fetched 2026-11-02 (HTTP 200): since October 8, 2026 the product is simply renamed Avast Premium VPN - same app, servers, price; the move into the Avast One single-platform app (free antivirus + paid bricks including the VPN) is the bigger change; IP Rotation changes exit IP every ~30 seconds by default; retest confirms 103 countries, dedicated P2P servers, WireGuard + Mimic, 1.9% London speed loss, 8 Netflix regions, Shenzhen connection, $3.99/mo 2-yr intro, 60-day trial.
Fetched 2026-11-02 (HTTP 200): 'a weaker pick if privacy is the main reason you want a VPN' - VPN Policy keeps connection events 12 months and server metadata 18 months, no published independent no-logs audit, and the 2024 FTC Jumpshot settlement; 'the first-year price is reasonable; the $99.99 yearly renewal is not'; affiliate-disclosing review site.
What users say (4)
Reddit, forums, HN - paraphrased and linked, never quoted out of context. Anecdotes, not proof - but refund complaints and leak reports are the best early-warning system this market has.
Fetched 2026-11-02 (HTTP 200): HN's Avast record runs from 2015 (HTTPS MITM root-certificate threads) through the Dec 2019 extension-removal threads, the Jan 2020 Jumpshot exposé thread (Leaked documents..., 2020-01-27), the CEO-message thread ('acted fully within legal bounds' skepticism, 2020-01-31), the FTC threads (2024), 'Avast Scandal: Why We Stopped Recommending Avast and AVG' (2023, 47 pts), and 2025 comments still citing 'the whole Avast Jumpshot debacle' as the canonical data-resale example.
Fetched 2026-11-02 (HTTP 422, retried 6+ times over ~10 minutes including 'secureline' variant and a lowercase subreddit variant): the archive returned 'Timeout. Maybe slow down a bit' for every subreddit=VPN query while the identical query shape for subreddit=antivirus succeeded - the same failure mode the hola dossier recorded. No r/VPN voices could be ethically cited this session; the Reddit platform is represented by r/antivirus instead.
Who is behind Avast SecureLine VPN?
VPN ownership is often deliberately layered through shell companies. This is what we could verify - with sources. Confidence: confirmed (checked 2026-09-29).
Generated by Qwen3 on 2026-11-02 from our fact database plus the linked sources. It summarizes - it does not add facts. Check anything that matters against the linked sources.
Bottom line: Avast SecureLine VPN is now rebranded as Avast Premium VPN, folded into the Avast One platform. It offers strong technical features - 103 countries, WireGuard, Mimic obfuscation that works in China, Double VPN, and solid streaming performance. But it’s sold by a company the FTC fined $16.5 million in 2024 for selling users’ browsing data through its Jumpshot subsidiary while claiming to protect privacy.
The logging truth: The provider claims it does not log IP addresses, DNS queries, browsing history, or transferred data. However, it retains server metadata for 18 months, connection logs for 12 months, and account data (including email) for the product lifetime plus two years. The FTC’s 2024 enforcement action proved Avast’s past logging and resale of browsing data was extensive and inadequately disclosed - directly contradicting its privacy claims. Jurisdiction spans the Czech Republic (EU/GDPR) and the US via parent Gen Digital, a Fortune 500 company.
Pricing reality: Intro pricing starts at $3.99/month on 2- or 3-year plans ($95.76 or $143.64 upfront), but renews at $99.99/year - a 67% to 109% price jump. There is no monthly plan. The 60-day free trial requires payment details and auto-converts to annual billing. The structure follows the classic antivirus upsell funnel: low initial cost, high renewal, long lock-in.
What reviewers say vs what users say: Affiliate reviewers like Gizmodo and The Proof Desk acknowledge improved performance and features in 2026 but downgrade Avast over the lack of independent audits and its FTC-sanctioned data resale history. User sentiment on Reddit and Hacker News remains sharply negative: “avoid-list,” “scareware,” and “aggressive ads” are common themes, with the Jumpshot scandal still cited in 2025-2026 as a definitive trust failure. The conflict is clear - reviewers judge the current product, users remember the proven betrayal.
Who runs it: Avast Software s.r.o. of Prague, a wholly owned subsidiary of Gen Digital Inc. (NASDAQ: GEN), a US-Czech Fortune 500 conglomerate formed in 2022 from the NortonLifeLock merger. Gen Digital owns Norton, Avira, AVG, CCleaner, and HMA VPN, with Avast’s engine underpinning most. The parent’s scale amplifies risk: privacy failures in one brand affect the entire ecosystem.
Sources & how this review was built
Every external source used on this page, with the date we fetched it and its evidence class [A]-[D] (A = primary/operator, B = serious press/research, C = community, D = our own measurements). Methodology: how we verify. Sources disappear or change - if a link is dead, tell us via contact.
Evidence classes on this page:[A] A: 5[B] B: 12[C] C: 4[D] D: 0(D stays empty until our own test phase)
A rare genuinely usable free plan (no card, P2P allowed on the 10 GB free tier) plus audited no-logs claims twice over - DefenseCode 2015 and Securitum 2024…
The most honest VPN on the internet, and in 2026 still the one this industry is measured against: numbered accounts, cash or Monero accepted, open-source…
The anti-affiliate champion candidate holds up: no affiliate program (stated out loud on the homepage), flat honest pricing, quarterly warrant canary, annual…
No comments yet - be the first. Posting runs a short proof-of-work in your browser (anti-spam), no account needed.