Is TunnelBear VPN safe?

TunnelBear VPN routes browser traffic through a proxy and accepts control messages from any Firefox extension without sender validation.

TunnelBear VPN is a browser-based VPN extension that routes web requests through TunnelBear's proxy servers using the browser's proxy API. The extension exposes an external messaging handler that allows any other installed Firefox extension to toggle the VPN on or off and open new tabs to arbitrary URLs, because no sender ID allowlist is enforced. No user data collection or exfiltration to third-party endpoints was identified in the extension source.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.