Is Avo VPN safe?
Avo VPN provides a VPN-style popup and requests proxy access, with no confirmed external data recipients documented.
Avo VPN declares storage and proxy permissions and presents controls for connecting through a VPN. The available database record does not include confirmed evidence of user data being sent to any endpoint, so this summary does not list external recipients.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Avo VPN reports connected without applying a VPN or proxy route.
Clicking the VPN control, Avo VPN can report a connected state though the background worker only records a status value.
No applied proxy or VPN route was found, so URLs and IP routing are not protected by the advertised state.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-506
- Source
- Dynamic sandbox
The user clicks the VPN control to connect.
The extension reports that Avo VPN is connected while only recording a status value instead of applying a proxy or VPN route.
- Browsing URLhttps://example.com/page (illustrative)
A URL is the page or destination the user expects the VPN connection state to cover.
- IP address203.0.113.10 (illustrative)
An IP address is the network address the user expects a VPN or proxy route to change or protect.
What it can do
Permissions this extension asks for, as declared in version 24.09.2025. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Store data in your browser
storage
Route all of your browsing through a server of its choosing
proxy