ExpressVPN Review Australia 2026
Sourced personal VPN — USD prepaid intros, inspectable Type I audit
ExpressVPN is for sale to Australians with advertised local city exits, documented 10–14 device caps, Lightway/OpenVPN on the main apps, and a 30-day money-back window on an initial website purchase by a first-time user. The honest Basic price is the billed total: USD$83.72 for 28 months, or USD$14.99 every month if you actually want month-to-month. Amounts are USD; sales tax may apply. The 8 May 2025 KPMG report was opened; it is a dated Type I design opinion, not zero retained account data. Advertised Australian servers are not data residency. No independent speed, leak or streaming tests were run.
- Best for
- Australian personal-VPN buyers who can read prepaid billed totals in USD, want documented multi-device apps, and accept a no-logs claim plus a public Type I design report rather than a lab test.
- Not ideal for
- Anyone budgeting the USD$2.99 teaser as a cancellable monthly AUD price, buyers who need confirmed Australian data residency or GST-inclusive AUD checkout, organisations that need private-resource access, or users who need a free plan.
SoftwareHQ does not currently have an affiliate arrangement with ExpressVPN. The review is independent of commercial relationships. Affiliate disclosure
Overview
ExpressVPN is a personal VPN. Ownership, logging claims and advertised exit locations are recorded separately. An Australian exit IP is not proof of Australian data residency.
Feature highlights
These highlights come from vendor documentation and editorial analysis of public sources. They are not firsthand test results or a claim that every listed capability was exercised in a trial.
- USD prepaid 2-year intro is not USD$2.99/month cancellable
On 11 Sep 2026 the 2-year Basic card billed USD$83.72 for 28 months and showed USD$2.99/mo as the equivalent. The 1-month Basic card was USD$14.99 billed every month. Amounts are USD; sales tax may apply at checkout. Do not budget the teaser as a cancellable monthly price.
- Ten simultaneous connections on Basic
Pricing table and terms: Basic 10 devices, Advanced 12, Express Pro 14. A router uses one licence. Starting listed personal plan is Basic. Not a measured throughput claim.
- Advertised Australian city exits
The Australia servers page names Sydney, Woolloomooloo, Melbourne, Brisbane, Adelaide and Perth. That is an advertised exit map, not physical-versus-virtual proof and not Australian account data residency.
- Lightway plus documented WireGuard on some apps
Lightway is ExpressVPN’s own protocol, documented on Windows, macOS, iOS, Android, Linux and routers. WireGuard is documented on iOS, Android and Windows only — not macOS or Linux on the servers table. OpenVPN is documented as a selectable protocol. This is not an independent speed test.
- Kill switch — documented, not lab-tested
Vendor pages describe Internet Kill Switch on by default on Windows, macOS and Linux, plus Android and iOS options. Split tunneling is documented on those five listed platforms (iOS is website/IPv4 exclusions). We did not run leak tests.
- No-logs claim with an inspectable KPMG Type I PDF
The 8 May 2025 KPMG ISAE (UK) 3000 Type I report was opened from a public PDF. It is a point-in-time design opinion as at 28 February 2025, not operating-effectiveness evidence. Account, payment and aggregate-transfer data are still described as processed. A Cure53 Lightway PDF (Dec 2024) printed a High server-DoS finding.
Ownership and jurisdiction
Legal entity and jurisdiction are not the exit-server map.
- Legal entity
- Express Technologies Ltd.
- Jurisdiction
- British Virgin Islands
- Parent company
- Kape Technologies (since 2021); privacy policy names Kape Technologies PLC (UK) as ultimate holding company
- Five Eyes
- No
Privacy policy last updated 1 Jan 2026 and Terms last updated 27 Jul 2026: the contract is with Express Technologies Ltd., BVI law. About-us / press: founded 2009, based in the British Virgin Islands, joined Kape in 2021. BVI is not a Five Eyes member; the UK parent is. Jurisdiction here is the legal entity, not the exit-server map and not the parent’s listing venue.
- https://www.expressvpn.com/privacy-policy · checked 2026-09-11
- https://www.expressvpn.com/tos · checked 2026-09-11
- https://www.expressvpn.com/about-us · checked 2026-09-11
- https://www.expressvpn.com/press · checked 2026-09-11
Logging and retained data
A vendor no-logs claim is not proof of zero retained account or payment data.
- Logging policy
- Vendor no-logs claim
- Retained service data
- Documented retained service data
Privacy policy 1 Jan 2026: ExpressVPN does not collect logs of online activity while connected, including browsing history, traffic destination, data content or DNS queries, and never stores connection logs of IP address, outgoing VPN IP, connection timestamp or session duration.
- account email, name and payment/billing identifiers (including billing country)
- which apps and app versions have been activated
- whether a VPN connection succeeded on a particular day (not a time of day), to which location (not assigned outgoing IP), and from which country/ISP (not source IP)
- aggregate data transferred in MB per user
- optional anonymised app diagnostics when opted in
- MediaStreamer authorised IP addresses when that optional service is used
- Identity Defender data when that US-only product is used (separate policy)
- a 24-month record of whether subscribed extras have been activated, for feature notifications
A no-logs claim is not proof of zero retained data. The opened KPMG Type I report quotes the same usage-statistics excerpts and does not erase account, payment or aggregate-transfer records. Dedicated IP uses an access code the vendor says staff cannot retrieve.
Transactional communications are retained for ten years per the privacy policy. Payment processors (PayPal, BitPay, Paymentwall, Stripe and others) collect their own checkout data. KPMG does not attest to the privacy policy in its entirety — only the excerpts in that report.
- https://www.expressvpn.com/privacy-policy · checked 2026-09-11
- https://www.expressvpn.com/wp-ws-cache/uploads-expressvpn/2026/07/expressvpn_isae3000_2025-02-28.pdf · checked 2026-09-11
- https://www.expressvpn.com/what-is-vpn/policy-towards-logs · checked 2026-09-11
Locations and hosting
Advertised exit countries, physical-versus-virtual evidence, control-plane hosting and account data residency are separate. An Australian exit IP is not Australian data residency.
- Advertised exits
- AU
- Australian exit
- Advertised — not proof of Australian data residency
- Exit location evidence
- Advertised
- Physical vs virtual
- Unknown
- Control-plane hosting
- Unknown
- Account data residency
- Unknown
- Legacy data_hosting field
- Unknown
expressvpn.com/vpn-server/australia-vpn (11 Sep 2026) advertises six Australian locations: Sydney, Woolloomooloo, Melbourne, Brisbane, Adelaide and Perth. The global servers table marks some other countries as “Available - Virtual Locations”; those six AU names were not classified as physical or virtual on the Australia page. An Australian exit IP is not proof of Australian data residency or of account/control-plane hosting. TrustedServer RAM-only servers are a vendor infrastructure claim, not a hosting-region proof.
- https://www.expressvpn.com/vpn-server/australia-vpn · checked 2026-09-11
- https://www.expressvpn.com/vpn-server · checked 2026-09-11
Per-platform features
Protocol, kill switch and split tunnel are recorded per platform. Missing documentation stays unknown or not tested.
| Platform | Protocols | Kill switch | Split tunnel |
|---|---|---|---|
| Windows | Lightway, WireGuard, OpenVPN, IKEv2 | Yes | Yes |
| macOS | Lightway, OpenVPN, IKEv2 | Yes | Yes |
| iOS | Lightway, WireGuard, OpenVPN, IKEv2 | Yes | Yes |
| Android | Lightway, WireGuard, OpenVPN | Yes | Yes |
| Linux | Lightway, OpenVPN | Yes | Yes |
Windows: Servers table: Lightway UDP/TCP, WireGuard, OpenVPN UDP/TCP and IKEv2. Internet Kill Switch is documented as on by default. Split tunneling how-to covers Windows 10/11 apps plus IP/subnet routing. Lightway Turbo is documented as Windows-only. Not leak-tested.
macOS: Servers table: Lightway, OpenVPN and IKEv2. WireGuard is documented as iOS, Android and Windows only. Kill Switch on by default. Split tunneling documented for macOS 11+ apps and IP/subnet ranges.
iOS: Servers table includes WireGuard on iOS. Kill Switch: Standard or Advanced in iOS Settings. Split tunneling on iOS is website/IPv4 exclusions, not per-app. Help: protocol picker includes Lightway and OpenVPN.
Android: Servers table: WireGuard on Android; IKEv2 is listed for iOS, Mac, Windows and routers — not Android. In-app kill switch on by default; split tunneling is per-app on Android 7.0+.
Linux: Servers table does not list WireGuard or IKEv2 for Linux apps. Kill Switch documented as built into the Linux app, on by default. Split tunneling documented for apps, IP addresses or subnets on supported 64-bit distributions.
Device limits and free tier
- Devices
- 10
- Concurrent connections
- 10
- Free tier
- No free tier
- Free-tier data cap
- Unknown
No free plan on expressvpn.com. FAQ 24 Jul 2026: ExpressVPN is not free; a 3-day risk-free trial is available for certain mobile devices and is not a website free tier. A 30-day money-back window on an initial paid website subscription is not a free tier. EventVPN is a separate ExpressVPN-family product and is not this listing. Aircove’s 30-day router trial is hardware. Device caps rise to 12 on Advanced and 14 on Express Pro.
Audit register
KPMG LLP
ISAE (UK) 3000 Type I independent reasonable assurance on the design of TrustedServer VPN service controls at Express Technologies Limited as at 28 February 2025. Opinion: the description fairly presents the services as designed and implemented, and control activities were suitably designed to achieve the stated control objectives if they operated effectively. Type I does not test operating effectiveness. KPMG does not attest to the privacy policy in its entirety — only excerpts in the report. Engagement letter 10 February 2025; report letter 8 May 2025, Leeds.
- Report date
- 2025-05-08
- Availability
- Full report published
- Inspection
- Independently inspected
The 40-page PDF was downloaded over HTTPS on 11 Sep 2026 and inspected. The gate page still asks for a KPMG terms tick before download; the PDF URL itself returned HTTP 200. A Type I design opinion is not proof of zero retained account, payment or aggregate-transfer data, which the same report still describes. This is not a numeric security score.
Cure53
White-box source-code audit of the Lightway Rust implementation and wolfSSL-RS bindings (EXP-16), CW43–CW44 2024, 24 person-days, five testers. One High finding: EXP-16-004 unauthenticated data fragments facilitate server DoS. Also Medium EXP-16-001 (password hashing) and lower-severity items. Report dated 3 December 2024.
- Report date
- 2024-12-03
- Availability
- Full report published
- Inspection
- Independently inspected
Public 20-page PDF opened on 11 Sep 2026. This is a protocol/code review, not a no-logs assurance, and not a numeric security score. The High finding is a server DoS issue as printed.
When this was checked
Status as of (page snapshot) against a 90-day review target. Checked dates are not updated when the site is rebuilt.
Editorial article date: . That is not proof that pricing, hosting, or compliance was re-checked.
- PricingVerified
Verified — checked 11 September 2026.
AU session USD. 2-year Basic billed USD$83.72/28 months, Advanced USD$111.72, Express Pro USD$167.72; 12-month Basic USD$59.85/15 months; 1-month Basic USD$14.99. Sales tax at checkout where applicable. Checkout not started.
- HostingUnknown
Unknown — checked date 11 September 2026 is not field-level evidence on its own.
Advertised AU city exits only. Account/control-plane hosting and data residency were not named as Australia. Unknown is not AU.
Subscription pricing
Prices below are in USD, not AUD. GST unknown. An effective monthly equivalent is not a cancellable monthly price. Verified — checked 11 September 2026. Source: expressvpn.com/pricing.
Default AU-session 2-year grid 11 Sep 2026: USD$2.99/mo teaser is not cancellable monthly. Struck USD$419.72, billed USD$83.72 for the first 28 months (24 + 4 extra). Hand check 8372/28=299. All amounts shown are in USD. Sales tax applied at checkout where applicable. Renews at USD$99.95/year. 10 simultaneous devices. Checkout was not started.
- Introductory billed total
- 83.72 USD
- Term
- 24 months
- Bonus months
- 4 bonus months
- Effective monthly equivalent
- 2.99 USD effective monthly equivalent — not a cancellable monthly price
- Renewal
- 99.95 USD / 12 months
- Month-to-month option
- 14.99 USD
Checked 2026-09-11
Vendor “Most popular” 2-year card. Billed USD$111.72 for 28 months (USD$3.99/mo equivalent), renews USD$119.95/year. Hand check 11172/28=399. Adds Advanced Protection, ExpressKeys and a 3-day eSIM allotment on the compare table. Identity Defender is documented as US-only and is not treated as an Australian extra. 12 devices. Checkout was not started.
- Introductory billed total
- 111.72 USD
- Term
- 24 months
- Bonus months
- 4 bonus months
- Effective monthly equivalent
- 3.99 USD effective monthly equivalent — not a cancellable monthly price
- Renewal
- 119.95 USD / 12 months
- Month-to-month option
- 16.99 USD
Checked 2026-09-11
Billed USD$167.72 for 28 months (USD$5.99/mo equivalent), renews USD$199.95/year. Hand check 16772/28=599. Compare table: Dedicated IP included; 14 devices; ExpressAI credits. Identity Defender remains US-only. Checkout was not started.
- Introductory billed total
- 167.72 USD
- Term
- 24 months
- Bonus months
- 4 bonus months
- Effective monthly equivalent
- 5.99 USD effective monthly equivalent — not a cancellable monthly price
- Renewal
- 199.95 USD / 12 months
- Month-to-month option
- 22.99 USD
Checked 2026-09-11
12-month dropdown 11 Sep 2026: billed USD$59.85 for the first 15 months (12 + 3 extra, USD$3.99/mo equivalent). Struck USD$224.85. Hand check 5985/15=399. Renews at USD$99.95/year. Paid in full at purchase, not monthly instalments. Checkout was not started.
- Introductory billed total
- 59.85 USD
- Term
- 12 months
- Bonus months
- 3 bonus months
- Effective monthly equivalent
- 3.99 USD effective monthly equivalent — not a cancellable monthly price
- Renewal
- 99.95 USD / 12 months
- Month-to-month option
- 14.99 USD
Checked 2026-09-11
1-month dropdown: USD$14.99 per month, billed every month. This is the cancellable month-to-month Basic option. Advanced monthly was USD$16.99; Express Pro monthly USD$22.99. Not the 2-year USD$2.99 teaser. Sales tax may apply at checkout. Checkout was not started.
- Introductory billed total
- 14.99 USD
- Term
- 1 month
- Bonus months
- None
- Effective monthly equivalent
- 14.99 USD effective monthly equivalent — not a cancellable monthly price
- Renewal
- 14.99 USD / 1 month
- Month-to-month option
- 14.99 USD
Checked 2026-09-11
Compare ExpressVPN subscription cash outlay
Observed price changes
Recorded when a listed price changed. This is not a complete vendor timeline.
- First AU-locale capture from expressvpn.com/pricing (CloudFront SYD, cookie country AU). 2-year Basic billed USD$83.72/28 months, 12-month Basic USD$59.85/15 months, monthly Basic USD$14.99. All amounts USD; sales tax at checkout where applicable. AUD local pricing described as testing; not printed on this grid. Checkout not started.
Pros & Cons
Pros
- Public site loaded from an Australian CloudFront POP on 11 Sep 2026 with cookie country AU
- 2-year, 12-month and 1-month Basic/Advanced/Express Pro billed totals are printed in USD
- Cancellable monthly Basic is documented at USD$14.99 — separate from the 2-year teaser
- Up to 10 simultaneous devices on Basic; 12 on Advanced; 14 on Express Pro (vendor table/terms)
- Advertised Australian exits: Sydney, Woolloomooloo, Melbourne, Brisbane, Adelaide, Perth
- Lightway documented on listed desktop/mobile apps; WireGuard documented on Windows, iOS and Android
- Kill switch documented on Windows, macOS, iOS, Android and Linux
- KPMG 8 May 2025 ISAE (UK) 3000 Type I PDF and Cure53 Lightway PDF were opened
Cons
- USD$2.99/mo on the 2-year Basic card is an effective monthly equivalent, not a cancellable monthly price
- Live AU grid is USD, not AUD; sales tax at checkout was not observed; gst_basis unknown
- No website free plan; FAQ lists a 3-day trial on certain mobile devices. 30-day money-back is first-time website purchasers only (App Store / Play / renewals / gift cards excluded)
- KPMG Type I does not test operating effectiveness and does not attest the whole privacy policy
- Cure53 Lightway PDF printed a High server-DoS finding (EXP-16-004)
- Australian exit IPs are not Australian data residency; physical vs virtual remains unknown
- WireGuard is not documented on macOS or Linux; Identity Defender is US-only
- Parent company is UK-based Kape; legal entity is BVI
- No independent speed, leak-test or streaming-unblocking results in this review
How this review was made
Reviews separate vendor documentation, editorial analysis and firsthand records. They are not interchangeable.
- Vendor documentation — Public pages from ExpressVPN and other sites. Recorded HTTP(S) URLs are listed under Sources. A source URL is a document we recorded, not a claim that every sentence on this page was checked against that URL.
- Editorial analysis — SoftwareHQ's written verdict and scores for Australian buyers. The header score is an editorial assessment, not a user-review average, not a lab result, and not a number derived from how many evidence records exist.
- Firsthand records — This review has no firsthand observation records, trial walkthroughs, or screenshots from a logged-in SoftwareHQ account. Missing tests stay not tested.
This page does not rank products by speed or security from documentation or from evidence count.
Checked by SoftwareHQ Editorial Team. There is no named author profile for this page; attribution stays with the SoftwareHQ editorial team. How we test and the editorial policy for scoring, independence and affiliate rules.
Sources
Public pages recorded when this review was compiled. They are not a checklist that every claim was verified, and they are not evidence of hands-on product testing.
- Expressvpn official site
- Expressvpn pricing
- Expressvpn privacy policy
- Expressvpn Tos
- Expressvpn Trust
- Expressvpn Vpn Server
- Expressvpn Australia Vpn
- Expressvpn about
- Expressvpn Press
- Expressvpn Network Lock
- Expressvpn Split Tunneling
- Expressvpn Lightway
- Expressvpn How Many Devices Can I Connect
- Expressvpn Kpmg 2025 No Logs Policy Audit
- Expressvpn Kpmg Privacy Policy 2025
- Expressvpn Expressvpn Isae3000 2025 02 28.pdf
- Cure53 Pentest Report Expressvpn Lightway 2024.pdf
- Expressvpn Expressvpn Local Currency Pricing
- Expressvpn Introducing Expressvpn Tiered Pricing
- Expressvpn What Is Expressvpns Refund Policy
- Expressvpn Frequently Asked Questions
- Expressvpn What Are Lightway Advanced Options And How To Use Them
ExpressVPN Alternatives
If ExpressVPN doesn’t quite fit your needs, consider these alternatives for Australian businesses:
- NordVPN — Personal VPN with prepaid intros, advertised AU exits, login-walled audit.
- Surfshark — Unlimited-device VPN with prepaid AUD intros and a public Deloitte report.
- Proton VPN — Swiss-jurisdiction VPN with a restricted free plan and public Securitum PDFs.
- Mullvad VPN — Swedish numbered-account VPN at a flat €5/month, public audit PDFs. From $5/mo.
- IVPN — Gibraltar-registered numbered-account VPN billed in USD, public Cure53 PDFs. From $6/mo.
Buyer guide
Source-based VPN guides for ExpressVPN: what a VPN encrypts, billed-term cash, free versus paid caps, how intro differs from renewal, how to read audits, how kill switch, split tunnel and protocols vary by OS, and when a consumer exit is the wrong product for company resources. Not a ranking.