HHUHU VPN
Log inSign up

Security

Security posture for the beta stage.

HUHU VPN is not claiming final audited commercial privacy status yet. This page documents the current MVP controls and what remains before public paid launch.

Inspect API docs

Current controls

What is already enforced.

  • JWT authentication before protected API calls
  • Active subscription and expiry checks before config delivery
  • Active node status validation before tunnel config is returned
  • No private keys hardcoded in application source
  • HTTPS on public API and website
  • PostgreSQL, Redis, and production health checks in place

Beta limits

What is not final yet.

  • Android real-device tunnel validation is pending.
  • Windows installer is unsigned by current decision.
  • Payment and commercial subscription purchase are not live.
  • Legal/privacy copy still needs final business review.

Transparency

Read the beta privacy statement before testing.

Privacy policyTerms