The assessment was conducted by Leviathan Security Group, an authorized security testing laboratory. According to the ADA’s public certification record, the app conforms to the applicable requirements of MASA v2.1.1.
The certification covers Planet Free VPN ™ Super Proxy, version 8.5.7, running in its default configuration on Android 17. The evaluation was completed on August 3, 2026, and certificate 10308 was issued on October 28, 2026. It remains valid until October 28, 2027.
What Did the Assessment Cover?
MASA is an independent mobile app security assessment program based on OWASP’s Mobile Application Security Verification Standard (MASVS).
At Level 2, an authorized laboratory conducts a full technical assessment of the application. The requirements cover several areas, including:
- Data storage: How the app protects sensitive information stored on devices.
- Encryption: How cryptographic methods and security keys are implemented.
- Network security: How the app protects communications and verifies connections.
- Platform security: How the app handles Android permissions and interactions with other applications.
- Code security: How it addresses software vulnerabilities and protects against tampering.
- Privacy: How it handles data collection, access, and deletion.
The ADA certification record confirms that the application meets the applicable requirements for this assessment.
What Does the Certification Mean for Users?
The certification provides independent evidence that Planet VPN’s tested Android application meets an established set of mobile security requirements.
However, its scope is limited to the assessed application. It should not be interpreted as an audit of Planet VPN’s server infrastructure, no-logs policy, or applications for iOS, Windows, and macOS.
The certificate also applies specifically to version 8.5.7 in its evaluated configuration, rather than every future release.
The certification was issued by TrustCB B.V., which the certificate identifies as provisionally authorized by the ADA. It also notes that TrustCB had not yet received ISO/IEC 17065 accreditation for the ADA certification scheme at the time of issuance.
Anyone can verify the certification directly through the App Defense Alliance’s public certificate registry.
