AMTSO VPN Testing Guidelines – preprint draft for public review

AMTSO’s first VPN Testing Guidelines paper is being made available for review. The framework was developed by AMTSO’s VPN Working Group, with significant initial development work from VPN experts at AMTSO member Nord Security. The draft of this first paper has gone through multiple rounds of review and refinement within the working group, and was presented and discussed at our member meeting in October. The near-final draft is now being made available as a “preprint” for review by AMTSO members and others with an interest in the field.

VPN creators, vendors, testers and evaluators are invited to provide their comments on the draft as we work towards the final version, which we aim to put forward for formal approval by AMTSO members early in 2025. The current comment period will remain open until mid-January 2025, at which point we expect to launch a formal adoption process within AMTSO after making any required changes based on feedback received.

This first paper focuses on core VPN features common to most or all consumer-level VPN services and solutions. A follow-up paper is planned looking more closely at additional security features commonly bundled in VPN packages, with further expansion to be planned. Participation in our VPN Working Group is open to all AMTSO members, and non-members active in the VPN space are welcome to provide their feedback on the groups activities and plans (please contact us via [email protected]) – such non-members are encouraged to join AMTSO to become more involved with the evolution of testing in the industry, but may also be invited to attend one-off meetings of the Working Group to provide further feedback.

Any comments on the draft should be sent to [email protected], ahead of January 15th.