ProtonBlog(new window)
An illustration of Proton Mail's code being examined.

The new Proton Mail has passed its independent security audit

Share this page

At Proton(new window), we believe everyone should be in control of their personal data. A critical component of controlling your data is having the ability to make informed decisions about who you entrust with your data and how it is secured. Most companies rely on security through obscurity and do not share their code, making it impossible for you to accurately assess how secure their service is.

Rather than relying on secrecy to protect our code, we believe in security through transparency, which means we: 

  • Make all our apps open source to leverage the expertise of IT security experts and the Proton community
  • Commission independent security experts to conduct regular audits of our code
  • Share the audit reports with the public

By subjecting our apps to rigorous public examination, we ensure that any potential vulnerabilities are swiftly discovered and resolved. 

We have previously shared the results of the audits for our Proton Mail(new window) and Proton VPN(new window) apps. Now that we have released the new Proton Mail, including Proton Calendar(new window), we would like to share the results of its audit as well.

The new Proton Mail is secure

Like all Proton applications, the new Proton Mail is open source, and anyone can inspect its code for themselves on GitHub(new window)

Prior to their release, the source code of both the new Proton Mail and Proton Calendar underwent an extensive security audit. We are happy to announce the final report was overwhelmingly positive, and the audit uncovered no major issues or security vulnerabilities

Read the audit report for the new Proton Mail(new window)

This security audit was carried out by Securitum(new window), a leading European security auditing company. Securitum currently oversees more than 300 security testing projects every year, including for many top European banks.

Read the latest audit reports for all Proton services

Security through transparency

Proton Mail was founded by scientists who met at the European Organization for Nuclear Research (CERN), and the scientific principles of peer review and transparency are core values of our team. Just as we would not trust a result without first seeing the underlying data, we do not expect you to trust us without being able to examine our work for yourselves. 

If you have questions or comments about the security audit for the new Proton Mail, please share them with us! Join the conversation on Twitter(new window) and Reddit(new window).

Secure your emails, protect your privacy
Get Proton Mail free

Share this page

Richie Koch(new window)

Prior to joining Proton, Richie spent several years working on tech solutions in the developing world. He joined the Proton team to advance the rights of online privacy and freedom.

Related articles

Can you password-protect a folder in Google Drive?
Protecting a folder with a password is a simple yet effective way of securing files. You may wonder whether you can password-protect a folder in Google Drive. We explain what access controls Google Drive offers and what you can do to improve your sec
Proton Pass now supports passkeys on all devices and plans
We’re excited to announce that Proton Pass supports passkeys for everyone, allowing you to manage and use passkeys across all devices seamlessly. Passkeys are an easy and secure alternative to traditional passwords that can help prevent phishing atta
what is a passkey?
Passkeys are a new way to secure your online accounts using cryptographic keys instead of passwords. They offer a high level of convenience and security, and are a real game-changer in the way we access and secure sites. What is a passkey, though, an
Apple’s marketing team has built a powerful association between the iPhone and privacy. The company’s ad campaigns claim that “what happens on your iPhone, stays on your iPhone.” And, “Privacy. That’s iPhone.” But Apple’s lawyers are telling a diffe
A cyberattack on national public employment service France Travail has exposed the personal data of as many as 43 million people.  The latest breach is the second major cybersecurity attack to happen in France in the past month, raising concerns abo
If I share a folder in Google Drive, can anybody see my other folders
Google Drive makes it easy to share files and folders, but you may have wondered at some point whether the people you’ve shared a folder with can see your other folders. We answer this question below and also share some tips for truly secure link sha
In 2014, Proton Mail was introduced as a web app, revolutionizing how we think about email privacy. Today, we’re excited to broaden the horizons of secure communication by launching the Proton Mail desktop app. Anyone can now use the new Proton Mail