The incumbent of self-hosted business VPNs, and still a safe pick in 2026 - with one honest fork in the road. Access Server is the polished, supported way to run OpenVPN on your own hardware: web admin UI, one-click client provisioning, MFA, SAML/RADIUS/LDAP, clustering and now DCO kernel acceleration, with a genuinely usable free tier of 2 simultaneous connections (verified live 2026-11-03). The community edition underneath is the same GPLv2 protocol with no connection limit but no UI - and r/OpenVPN threads still open with users confused about exactly this split, which the company could document better. The audit record is unusually strong for 25-year-old C code: Quarkslab 2017, Trail of Bits 2022-2023 (no significant flaws), and a 2026 SRLabs audit of 2.7 release candidates that found 18 issues including one critical unauthenticated-DoS logic inversion - fixed before release, which is the system working, but a reminder that 'audited since 2017' is not 'bug-free'. Costs scale per connection and get 'stupid expensive' for medium-sized teams by community consensus, Pritunl and WireGuard/Headscale are the usual escapes, and OpenVPN remains trivially detectable by DPI - this is a remote-access tool, not an anti-censorship tool.
auditopen source3 red flagsfacts verified - openvpn.net operator pages (access-server product, pricing, community, about, compliance, as-docs v3), the Trail of Bits audit blog, SRLlabs 2026 audit blog, OSTIF Quarkslab audit results, Wikipedia, the Meetrix self-hosted VPN comparison, the Wayback capture of the 2022 Access Server pricing page, the OpenVPN GitHub org repo list, HN Algolia, the live HN thread 44706653 and four arctic-shift Reddit archives all fetched live 2026-11-03; ZDNET returned 403 (Cloudflare) and is cited from search snapshot only; arctic-shift body-search returned 422 (rate-limited, the known failure mode) for r/selfhosted and r/OpenVPN body=server, so thread/link_id endpoints were used instead; no acquisition of OpenVPN Inc could be confirmed in any fetched source
The task premise that OpenVPN was acquired in 2021-2024 could not be verified: the live about page (fetched 2026-11-03) still lists co-founders Francis Dinha (CEO) and James Yonan leading the company, PitchBook shows only a private secondary share transaction in August 2023, and no fetched news source reports an acquisition - documented as privately held rather than asserted otherwise
Pricing-model churn: the product moved from free fixed license keys to subscriptions around 2021 (r/OpenVPN complaints fetched via arctic-shift), and the 2026 site's own FAQ has to explain why trial users see an '$8,400/year subscription' they never asked for - transparent but confusing, and the kind of billing surprise that erodes homelab trust
US (Five Eyes) jurisdiction for the vendor, plus licensing phone-home: acceptable for business remote access, weak for an anonymity threat model - and OpenVPN's DPI-detectability makes it a poor choice in censored networks regardless of who runs the server
Review
draft generated by Qwen3, fact-checked by the vpncomparison editorial desk · review version 3 · prose updated 2026-11-03 · facts as of 2026-11-03 · how we verify
Honesty note: we have not run our own tests on OpenVPN Access Server yet (leak tests, speed, kill switch). Everything on this page is source-based meta-research with dated links. When we test it, results appear here and on the change log.
Overview
OpenVPN Access Server homepage - live capture 2026-09-29
OpenVPN Access Server is self-hosted commercial VPN software built atop the open-source OpenVPN protocol, operated entirely on your own infrastructure. Run by OpenVPN Inc. in the United States (a Five Eyes country), it gives you full control over user access and logs. The catch: you're responsible for security, updates, and networking - this isn’t a plug-and-play privacy tool, but a remote-access solution for businesses and homelabs.
Logging & privacy
You control the logs - OpenVPN Inc. does not see your traffic or session data because the Access Server runs on your hardware or cloud instance. There is no logging policy to verify from the vendor, as they only provide the software. Audits cover the underlying OpenVPN code: QuarksLab (2017), Trail of Bits (2023), and SRLabs (2026) found vulnerabilities, including a critical unauthenticated DoS in 2.7’s release candidate, fixed before launch. The vendor operates under U.S. jurisdiction, and license activation requires phoning home to OpenVPN’s servers, though the community edition does not.
Pricing & the renewal trap
OpenVPN Access Server pricing page - live capture 2026-09-29
Pricing is $7 per month per connection on the Growth plan, billed yearly, with no introductory discount. The renewal rate is identical ($7/connection/month), so the renewal ratio is exactly 1 - no hidden price jump. The Free plan allows 2 simultaneous connections forever, no credit card needed. There is no documented minimum purchase, and refunds or contract terms are unspecified. Payment is fiat-only; crypto is not accepted.
Features & performance
OpenVPN Access Server apps / download page - live capture 2026-09-29
Supports OpenVPN protocol over UDP or TCP (including port 443 for firewall traversal), split tunneling, and runs on Windows, macOS, Linux, Android, iOS, and routers. No multihop, TOR over VPN, or dedicated IP features. P2P is allowed. The software supports clustering, DCO kernel acceleration, and enterprise auth (SAML, LDAP, RADIUS, MFA). Server and country counts are irrelevant - this is self-hosted. Performance claims are not independently tested, but community reports praise ease of setup and reliability for remote access.
Ownership & track record
OpenVPN Inc. remains independently operated as of 2026, with co-founders Francis Dinha (CEO) and James Yonan still leading, per the official about page. No acquisition has been verified. The company shifted from free fixed licenses to subscriptions around 2021, sparking community backlash. Despite this, Access Server maintains strong reputation among businesses (“trusted by 20,000+ organizations”) and homelab users. Audits are transparently published, and critical flaws have been responsibly patched pre-release. Data quality is verified across multiple sources.
Censorship resistance
OpenVPN Access Server uses standard OpenVPN, which can run over TCP port 443 to mimic HTTPS traffic - effective against basic corporate firewalls. However, it is detectable via deep packet inspection (DPI) regardless of port or protocol, making it unsuitable for high-censorship environments like China or Iran. Unlike WireGuard, which silently drops unauthenticated packets, OpenVPN responds during handshake, revealing its presence. This is a remote-access tool, not a censorship circumvention solution.
Verdict
Choose OpenVPN Access Server if you need a self-hosted, enterprise-grade remote-access VPN with a polished admin UI, MFA, and SAML support - especially for small teams under 10 users. Avoid it for anonymity or bypassing state-level censorship. The Free plan (2 connections) is genuinely usable. OpenVPN Inc. does not appear to run an affiliate program, so review site endorsements are less likely to be financially biased.
++ What holds up
Free forever for 2 simultaneous connections with every feature enabled, no card required (live pricing page 2026-11-03)
Working web admin console out of the box - the most complete UI among self-hosted options by a distance (Meetrix 2026 comparison), and HN users report 10-minute DigitalOcean deployments
Unusually deep audit history for VPN server code: Quarkslab/OSTIF 2017, Matthew Green crypto review 2016/2017, Trail of Bits 2022-2023, SRLabs 2026 - all with public reports
Enterprise auth stack on every tier: PAM, LDAP, RADIUS, SAML/SSO, TOTP MFA, certificate auth, device registration (live feature table)
One subscription covers clustered high-availability nodes; per-connection (not per-user) licensing, connections added or removed with prorated credit (2022 pricing page, fetched via Wayback)
-- What to watch
Connection-based pricing adds up fast: $7/connection/month billed yearly (calculator verified live 2026-11-03); HN in 2021 already called it 'around $50 a month for more than 2 clients' and r/OpenVPN users call medium-size scaling 'stupid expensive'
Access Server itself is closed source - the GPLv2 open-source part is the community edition daemon; no access-server repo exists in the OpenVPN GitHub org (checked via GitHub API 2026-11-03)
OpenVPN is trivially detected and blocked by DPI; no obfuscation layer beyond TCP-443 disguise (Wikipedia + r/selfhosted thread, fetched 2026-11-03)
The 2026 SRLabs audit found 18 issues in 2.7 release candidates including a critical unauthenticated DoS introduced in May 2022 that survived two prior audits and years of oss-fuzz
Subscription activation requires reaching OpenVPN licensing servers - a dependency for airgapped-ish setups unless on the Free plan (support docs describe licensing-server connectivity troubleshooting)
Pricing reality check
Intro price
$7 /mo · renews $7/mo
Renewal price
$7/mo
Notes
Connection-based per-connection licensing (live pricing page 2026-11-03): Free plan up to 2 simultaneous connections free forever with all features; Growth plan priced per connection - the on-page calculator showed $7/month per connection for a 10-connection plan billed yearly ($70/month total), with a 'Save $240' yearly indicator implying roughly $9 per connection on monthly billing; Enterprise & IoT is custom-quoted (2,000+ connections, volume discounts, 24/7 priority support, SLA). Subscriptions are based on simultaneous active connections, not users, CPU cores or bandwidth. Historical model documented on the Wayback capture of the 2022 pricing page (fetched 2026-11-03): 'Two free, 10 minimum and any amount up to 2000 for self-service' - ten connections was the stated minimum for the subscription service. The r/OpenVPN 2021 thread (fetched via arctic-shift) records community complaints when the old fixed-license-key model became a subscription.
Check the renewal price above before any multi-year plan - true-cost calculator.
Is OpenVPN Access Server legit?
Legal domicile: United States - OpenVPN Inc., Pleasanton, California (about page fetched 2026-11-03); a Five Eyes member country. Logging claim: You are the operator: Access Server runs on your own Linux host, VM, Docker container or cloud instance, so session and connection logs ('Session and connection logs' and syslog support are listed product features) live on your own server, not with OpenVPN Inc. - evidence class: no logging claim at all. No incidents on file in our research - absence of evidence is not proof of innocence. Facts verified - openvpn.net operator pages (access-server product, pricing, community, about, compliance, as-docs v3), the Trail of Bits audit blog, SRLlabs 2026 audit blog, OSTIF Quarkslab audit results, Wikipedia, the Meetrix self-hosted VPN comparison, the Wayback capture of the 2022 Access Server pricing page, the OpenVPN GitHub org repo list, HN Algolia, the live HN thread 44706653 and four arctic-shift Reddit archives all fetched live 2026-11-03; ZDNET returned 403 (Cloudflare) and is cited from search snapshot only; arctic-shift body-search returned 422 (rate-limited, the known failure mode) for r/selfhosted and r/OpenVPN body=server, so thread/link_id endpoints were used instead; no acquisition of OpenVPN Inc could be confirmed in any fetched source (not fully verified) as of 2026-11-03 - read the sources below.
The money trail - what review sites earn by recommending this
affiliate status not verified yet
If we sign up for this program, every link here becomes rel="nofollow sponsored" and routes through /go/. Until then our links point straight to the provider's website with zero tracking. Ranking logic physically cannot read affiliate fields - here is the proof.
On the website
Captured by our screenshot bot from the live site (or its public archive). A capture is evidence of what the page showed at capture time - not an endorsement.
OpenVPN Access Server homepage - live capture 2026-09-29OpenVPN Access Server pricing page - live capture 2026-09-29OpenVPN Access Server apps / download page - live capture 2026-09-29
Before you pay: check the renewal price, the refund window, and whether a cheaper or free path covers your use case - the honest checklist.
Based on our checks as of 2026-11-03: OpenVPN Access Server scores 4.7/10 in our weighted review. We logged 3 red flags (listed above). User reports, ownership and the incident record are documented with dated sources in the meta-review below.
What do I actually get with the Free plan?
You get full Access Server features with up to 2 simultaneous connections, no credit card required. For more connections, use the open-source community edition (unlimited, CLI-only) or pay $7 per connection/month on the Growth plan.
What is the renewal price and total cost over three years?
The renewal price is $7 per connection per month, same as the intro rate. The `derived_pricing` shows a renewal ratio of 1, meaning no increase. The three-year cash total is not computable due to variable connection counts and billing structure.
What proof is there that no logs are kept?
OpenVPN Inc. doesn’t operate the servers, so your logs stay on your infrastructure. There's no third-party audit of the Access Server software itself, but the underlying OpenVPN code has been audited multiple times (QuarksLab, Trail of Bits, SRLabs), with vulnerabilities responsibly disclosed and fixed.
Does this work in heavily censored countries like China or Iran?
No. OpenVPN is detectable via deep packet inspection regardless of port or protocol. While TCP 443 helps with basic firewalls, it won’t bypass advanced DPI used in censored networks. Use tools designed for obfuscation (like Shadowsocks or obfuscated WireGuard) instead.
Can I pay anonymously?
No. You need an email-based OpenVPN account to download the software and activate licenses, but no government ID or payment is required for the Free plan. Crypto payments are not supported, and all paid plans require fiat billing.
What happens if OpenVPN Inc. shuts down?
The open-source core (OpenVPN 2.x) remains GPLv2-licensed and functional. Access Server’s proprietary management layer would no longer receive updates, but existing deployments could continue running. Community forks or migration to WireGuard/Headscale would be likely paths.
What’s the honest free or cheap alternative?
Use the OpenVPN community edition (free, unlimited connections, CLI-only) or WireGuard with Headscale (free, modern, stealthier). For managed simplicity, CloudConnexa offers 5 free seats. Pritunl is a self-hosted alternative with a free tier and better per-user pricing at scale.
The meta-review: what the internet says about OpenVPN Access Server
We do not expect you to trust us. This review is a meta-review: below you see what other review sites claim - with their conflicts of interest labeled - what users report on Reddit and forums, and who actually operates OpenVPN Access Server. Every claim links to its source so you can verify it yourself.
What other reviewers say (2)
Every source carries a conflict label from our review-site database. "Affiliate-funded" means the site earns money if you buy what it recommends. We include critical voices deliberately.
Fetched 2026-11-03: editorial comparison with a disclosed conflict of interest (the publisher sells Access Server and Headscale AWS AMIs). Verifies current pricing (free for 2 connections, $7/connection/month billed yearly, Enterprise 2,000+ custom), praises the day-one admin console and TCP-443 firewall traversal, ranks Access Server's UI as 'the most complete of the three, by a distance'; useful honest scoping of hosted vs self-hosted trade-offs.
Returned 403 (Cloudflare) to our fetcher on 2026-11-03; content seen via search snapshot: hands-on test of all three OpenVPN tiers with a comparison table - Community Edition free/CLI only, Access Server free for 2 connections then $7/connection/month with web GUI, CloudConnexa free 5 seats then $7-9.50/seat/month; notes Access Server's advantages become caveats since you still host and patch the server yourself, while the web UI with LDAP/SAML/RADIUS/MFA reduces management overhead. Treat as reported, not re-verified.
What users say (8)
Reddit, forums, HN - paraphrased and linked, never quoted out of context. Anecdotes, not proof - but refund complaints and leak reports are the best early-warning system this market has.
Fetched 2026-11-03 (HTTP 200): 2026 community texture - the recurring openvpn.net-vs-open-source confusion, Access Server recommended for Entra ID/SAML group-based access control, an Ubuntu-26 compatibility question, a multi-day multi-ISP connectivity debug, and a use-case thread about revoking access for a lost device.
Fetched 2026-11-03 (HTTP 200): documents the 2021 subscription-model backlash - a user who switched back to the free version over the pricing change, a detailed breakdown of AS's two web frontends atop the OSS core and the 'stupid expensive' scaling complaint with a Pritunl recommendation, plus positive reports on the free tier running on a Raspberry Pi 4.
Fetched 2026-11-03 (HTTP 200): community consensus pushed back hard on the stealth claim - top comments note WireGuard silently drops unauthenticated packets by default while OpenVPN's TLS handshake responds and is fingerprintable; OP deleted the post. Documents OpenVPN's detectability as lived community knowledge.
Fetched 2026-11-03 (HTTP 200): recent thread titles show OpenVPN server life in r/selfhosted - protocol comparisons against WireGuard/IKEv2, 'PiVPN updated with improved OpenVPN security', hosting OpenVPN on Android, profile-import troubleshooting, and the stealth PSA thread.
Fetched 2026-11-03 (HTTP 200, 257 hits): a decade of HN sentiment - 2014-2016 praise for the easy web UI and 2-free-license model, the 2016 'paying as a way to fund open source' confession, 2021 price grumbling versus Pritunl, 2022 positioning by the Firezone CEO as the 'classic east-west VPN' category, and 2025-2026 self-hosting endorsements.
Thread page fetched live 2026-11-03 (HTTP 200); comments retrieved via HN Algolia. Contains the 'best VPN is to host your own' endorsement of the preconfigured DigitalOcean OpenVPN Access Server droplet (10-minute setup) in the context of the UK Online Safety Act driving users toward self-hosted VPNs.
Fetched 2026-11-03 (HTTP 200): 28 public repos - openvpn daemon (license NOASSERTION, i.e., the GPLv2-with-exceptions file), openvpn3, openvpn-gui, easy-rsa, ovpn-dco kernel driver, openvpn3-linux (AGPL-3.0) and tooling - and no access-server repository, confirming the commercial Access Server management layer is not open source.
AI fact summary - everything we know, compressed
Generated by Qwen3 on 2026-11-03 from our fact database plus the linked sources. It summarizes - it does not add facts. Check anything that matters against the linked sources.
Bottom line: OpenVPN Access Server is self-hosted software, not a subscription VPN service - you run it on your own server. It’s a mature, well-audited solution with a free tier for up to 2 connections and enterprise features like SAML, MFA, and clustering. This is remote access infrastructure, not anonymity infrastructure.
The logging truth: You control the logs - OpenVPN Inc does not operate the tunnels or store session data. The software runs on your infrastructure, so logging depends on your configuration. The vendor is based in the United States (Five Eyes), but their role is limited to licensing and optional cloud-assist features; no evidence of backdoors or forced disclosures exists.
Pricing reality: The Free plan allows 2 simultaneous connections forever, no credit card needed. Paid Growth plans cost $7 per connection per month billed yearly, with no introductory discount. Pricing scales linearly, which becomes expensive beyond small teams - community users call it “stupid expensive” at scale. No hidden renewal trap, but the trial shows a misleading $8,400/year placeholder that confuses users.
What reviewers say vs what users say: Affiliate reviewers highlight the polished UI and enterprise integrations, calling it “the most complete” self-hosted option. Users confirm it’s reliable and easy to set up but stress that the free open-source edition offers unlimited connections and better transparency - many warn newcomers not to pay unless they specifically need the Access Server management layer. The 2021 shift to subscriptions caused lasting distrust.
Who runs it: OpenVPN Inc, founded in 2002 and still led by co-founders Francis Dinha (CEO) and James Yonan (CTO), operates from Pleasanton, California. No acquisition has been confirmed. The company funds development through commercial offerings (Access Server, CloudConnexa) while maintaining the open-source core.
Sources & how this review was built
Every external source used on this page, with the date we fetched it and its evidence class [A]-[D] (A = primary/operator, B = serious press/research, C = community, D = our own measurements). Methodology: how we verify. Sources disappear or change - if a link is dead, tell us via contact.
Evidence classes on this page:[A] A: 7[B] B: 6[C] C: 8[D] D: 0(D stays empty until our own test phase)
The most credible self-hosting on-ramp in the VPN space, built by and for people inside the censorship: the app is free and open source, you connect it to your…
auditedopen source
intro $5 /mo
Cyprus (EUPHORIATECH LIMITED, Nicosia, reg HE 484287 per site footer, verified 2026-11-02; IP rights in Portugal with Amnezia LDA, ops in Estonia) - for self-hosted users the operative jurisdiction is wherever their own VPS is hostedself-hosted vpn 11 d ago
The gold standard for connecting your OWN devices, and a poor substitute for a consumer VPN - which is exactly what it says on the tin. Tailscale is a…
auditopen source
intro $8 /user/mo
Canada - Tailscale Inc., Toronto, Ontario (Wikipedia, Bloomberg); a Five Eyes member country; privacy policy names processing locations in Canada, Germany, the US and the UKself-hosted vpn 11 d ago
The most polished way to hand censorship-resistant access to people who cannot configure a VPN: a few clicks in the Outline Manager builds a Shadowsocks server…
auditopen source
intro $3 /mo
United States - Outline Foundation, 30 N Gould St. #57975, Sheridan, Wyoming (contact address in Terms of Service and on the Google Play developer listing); ToS governed by Wyoming law. The software itself has no jurisdiction: the operative jurisdiction for a self-hosted user is wherever their rented VPS is located and the laws governing their cloud provider.self-hosted vpn 10 d ago
No comments yet - be the first. Posting runs a short proof-of-work in your browser (anti-spam), no account needed.