OpenVPN Inc.

40% of professionals have access to sensitive data they don't need. Only 27% of organizations revoke that access immediately when someone changes roles. Those numbers came out of conversations with 45 IT and business leaders — and they're where Francis Dinha starts his opening keynote at OpenVPN [Con]nected 2026. "What 45 Businesses Told Us About Security in the AI Era" kicks off at 11 a.m. ET on October 22. Francis digs into why Zero Trust adoption stalls, the AI Willingness Paradox, and five steps you can take back to your team on Monday. It’s free and virtual, and replays go to everyone who registers. Full agenda → https://openv.pn/46By8tU #OpenVPNConnected #ZeroTrust #AI #CyberSecurity #OpenVPN25

OpenVPN Access Server is the #1-ranked solution in Enterprise Infrastructure VPN on PeerSpot, with a 4.2/5 average across 71 verified reviews. One of those reviews comes from a network operations center engineer at a computer software company with 10,000+ employees. Two things stood out to him: the admin web UI gave his team enough visibility into active sessions and connection history that connection-related tickets stopped reaching support, and Active Directory integration took the manual profile handoff out of onboarding entirely. Secure remote access for an enterprise team, without the ticket queue that usually comes with it. Read the full review: https://openv.pn/4y8m6nI #AccessServer #SecureRemoteAccess #EnterpriseVPN #CustomerReviews

Closed source doesn't eliminate vulnerabilities. It only limits who is allowed to find them. In a new piece for Forbes, our CEO, Francis Dinha, argues that AI has changed the economics of that tradeoff. Inspecting code used to be slow, expensive, and limited to whomever the vendor let look — which is what made "trust us" a workable answer. It isn't anymore. GitHub's Secure Open Source Fund resolved more than 4,000 security alerts in six months. None of that work is possible against code no one outside the vendor can read. But transparency alone isn't the finish line. A TechRadar audit found major VPN providers still shipping OpenVPN code from 2019, without disclosing it. The open source wasn't the problem. The failure to maintain it was — and customers running closed applications had no way to find out. That's why provenance matters as much as visibility: signed releases, software bills of materials, reproducible builds, and cryptographic attestations proving that what's running matches the source. The question for security leaders is shifting from what a vendor says about their security to how much of it they'll let someone else confirm. The full argument 👇 https://openv.pn/4yMSCfl #OpenSource #Cybersecurity #AI #SupplyChainSecurity #InfoSec

This week's cybersecurity headlines share a theme: the platforms built to be trusted with the most access are exactly where attackers are concentrating their efforts. N-able's N-central — the RMM platform MSPs use to manage thousands of client networks — disclosed a pre-auth remote code execution flaw with a maximum CVSS score of 10.0, its second critical, actively exploited incident in six weeks. Cisco confirmed a CVSS 9.8 flaw in Secure Email Gateway that lets a single crafted email hand an attacker root access, with a federal patch deadline landing today. And a hijacked AI coding-assistant session was used to spread the self-propagating Shai-Hulud worm across ~100 internal repositories, while Anthropic disclosed that seven China-based AI labs ran industrial-scale campaigns to illicitly extract Claude's capabilities. None of that displaced the fundamentals: CenterPoint Energy confirmed 7.49 million customer records were taken through an unsecured API. Takeaway for security leaders: this week's damage came from platforms with outsized blast radius — RMM tooling, email gateways, AI coding assistants, model APIs. If your vendor risk register still treats "critical infrastructure software" as one line item, split it into the specific platforms that carry the most downstream exposure in your environment. Full breakdown: https://openv.pn/4rebFMN #Cybersecurity #InfoSec #AISecurity #DataBreach #PatchNow

IT teams shouldn't have to choose between "self-hosted control" and "simple to deploy." Our upcoming webinar, Meet Access Server Link, shows you how to get both—a guided, browser-based Access Server deployment that removes manual DNS, SSL, and IP configuration while keeping your VPN traffic on infrastructure you control. Sept. 29 @ 10 AM PST. Register here: https://openv.pn/3UQHwHv

"Is OpenVPN slow?" is a fair question, and the benchmarks behind it were all run against our userspace client. Here's the current picture. On GL.iNet's Mudi 7 — same router, both protocols, GL.iNet's own testing — OpenVPN with Data Channel Offload ran 700 Mbps to WireGuard's 600. On a Ryzen 9 9950X with 25 GbE, turning DCO on took OpenVPN from 3.61 Gbps to 7.15 Gbps. Same machine, same protocol, encryption moved into the kernel. We put the whole comparison on one page: 13 dimensions side by side, including the three WireGuard wins. Read it, then share it publicly with #OpenVPNGotFast before October 16 and you're entered to win a GL.iNet Flint 3 Wi-Fi 7 router. Comparison: https://openv.pn/4yHllSI Contest rules: https://openv.pn/46Z7Th2 #OpenVPNGotFast #WireGuard #VPN #NetworkSecurity

Self-hosted VPN control shouldn't require a DNS and certificate management specialist on staff. Join Sean Golriz and Brandon Giron on Sept. 29 for a live look at Access Server Link — automated DNS, trusted SSL, and centralized visibility for Access Server deployments in AWS, Azure, and Google Cloud. Register: https://openv.pn/3URaI10

Access Server Link gives organizations a self-hosted ZTNA solution on AWS, Azure, and Google Cloud. More info --> https://lnkd.in/erfPBcsZ

Every AI agent your team spins up — Claude Code, Cursor, ChatGPT, or something built in-house — is another set of credentials, another blind spot, another compliance question. MCP Gateway gives every one of those agents a single, secured front door: unified identity, granular access controls, usage caps, and complete audit logs. It's still taking shape, and we're asking the people who'll actually use it to help shape it. Read the full announcement and let us know which capabilities matter most to you — plus get early access to the beta. 🔗 https://openv.pn/4yuGrn3

The agenda for OpenVPN [Con]nected 2026 is live. 📅 October 22 | 11 a.m.–4 p.m. ET | Free & virtual Here's what to expect: → Keynote from CEO Francis Dinha → Panels and fireside chats on AI and Zero Trust → Live, on-demand product support from our team → A networking space to connect with IT and security peers Drop in for the sessions that matter to you, or stay for the full day. All replays go out to every registrant afterward. Check the agenda and save your spot: https://openv.pn/4yR4hKb #OpenVPNConnected #ZeroTrust #AI #NetworkSecurity