A range of free cybersecurity tools—such as Wireshark and Nmap—are widely used to help monitor networks and identify vulnerabilities. However, cybersecurity professionals say users should be cautious when installing free security software, particularly when products have unclear privacy policies, inconsistent update histories, or poor independent reviews.
January, 2026 — Concerns about free security tools resurfaced after a browser-based VPN proxy extension marketed as a privacy product was found to be collecting user data and sharing it with third parties. The incident highlighted how tools promoted as “protective” can still expose users to surveillance and data monetization.
In December, investigators reported that the VPN proxy extension—intended to hide IP addresses and support anonymous browsing—had collected information from at least six million users. According to reports, text entered through the extension into AI services such as ChatGPT, Gemini, Claude, and Copilot was transmitted to advertising and data brokerage companies.
While cases like this have increased skepticism around “free” cybersecurity products, some experts argue the issue is not the price tag but the provider’s practices. Planet VPN, which offers a free virtual private network, said free tools are not necessarily unsafe, noting that many legitimate cybersecurity utilities used by professionals are available at no cost.
Examples include Wireshark, a network traffic analyzer used by IT and security teams, and Nmap, a tool commonly used for network discovery and auditing. Some password management tools are also offered without separate payment, including one integrated into Apple devices.
Konstantin Levinzon, co-founder of Planet VPN, said both paid and unpaid security services can create privacy risks. He said users should evaluate products based on technical transparency and third-party validation rather than assuming paid tools are automatically safer.
“Considering the fact that a number of free cybersecurity service providers have tried to profit from their users, consumers are right to be suspicious and should treat free cybersecurity tools with caution,” Levinzon said. He added that free access to basic protection remains important as cyber incidents continue to increase, but that users should verify whether a tool is trustworthy before adopting it.
Review the tool’s update history
Levinzon said security tools that receive regular updates are more likely to address newly discovered vulnerabilities and maintain modern encryption and security standards.
A lack of updates—or a history of irregular patch releases—may indicate poor maintenance, which could leave users exposed to known security flaws. Update information is typically available on official documentation pages, app store listings, or developer repositories such as GitHub.
Evaluate reputation and transparency
Security specialists recommend checking whether the vendor has a consistent track record across multiple platforms. Independent reviews, user feedback, and community discussions—such as cybersecurity forums, app store ratings, and third-party evaluations—can help identify recurring issues.
Transparency is another key factor, especially in services that handle sensitive network traffic. Vendors that clearly disclose how they store data, implement encryption, and respond to vulnerability reports may be less likely to engage in undisclosed data collection, Levinzon said.
In the VPN sector, he added, the absence of detail about logging practices or third-party access can be a warning sign. “A reliable VPN provider, be it free or paid, should not share, store, or collect data like browsing history, IP addresses, and ensure that your online activity remains private,” he said.
Levinzon also said users may want to consider a provider’s legal jurisdiction. He pointed to intelligence-sharing alliances known as the “Five Eyes,” “Nine Eyes,” and “Fourteen Eyes,” arguing that these frameworks can increase the likelihood of cross-border surveillance or data-sharing requests.
Watch for loopholes in the privacy policy
Levinzon said users often ignore privacy policies, even though they may contain key information about how data is handled. Vague or contradictory language about data retention, third-party sharing, or advertising use can indicate higher privacy risk.
Advertising itself is not automatically disqualifying, he said, but companies should clearly explain what is shared and under what conditions. “It is natural for free cybersecurity service providers to display ads in order to generate revenue for infrastructure and service quality improvements,” he said. “However, they should explicitly state that only non-personalized, aggregated data is shared with ad platforms—and only with the user’s explicit consent.”
