X-VPN's 200%+ Speed Upgrade Comes With an Independent Security Audit of Talaria

X-VPN has rolled out a major speed upgrade centered on its new in-house Talaria VPN protocol, supported by improvements to server infrastructure and data processing. In the company's internal 10 Gbps tests, Talaria delivered over 200% aggregate improvement in download and upload speeds compared with X-VPN's previous best-performing protocols, including the industry-standard WireGuard protocol in applicable test configurations.

Talaria underwent an independent security assessment by Singapore-based Vantage Point Security. The assessment identified no security vulnerabilities in the reviewed scope. All four observations were addressed by X-VPN and verified as fixed by the security firm during retesting. Talaria is also open source, allowing security researchers and developers to review its codebase.

How Talaria Delivers Faster VPN Performance

Talaria is designed to reduce the processing overhead that can limit VPN performance, particularly when handling large data transfers and multiple simultaneous connections.

Its multi-channel architecture gives each application connection a separate transport channel, allowing concurrent data streams to be processed independently across CPU cores. Talaria also handles packets in batches and uses a streamlined processing pipeline to reduce repeated operations. On supported paths, flow-level forwarding further reduces unnecessary packet handling.

By streamlining how data moves through the VPN connection, Talaria can make more efficient use of available bandwidth. Separate internal tests at 1 Gbps and 100 Mbps showed download speed loss within 5% on Windows and macOS across the tested connections, compared with the VPN-off baseline.

Talaria's transport optimizations are one part of X-VPN's broader speed upgrade. The company has also expanded its server infrastructure, introducing 25 Gbps server port capacity in the United States and Canada, along with 10 Gbps infrastructure in Germany, Spain, the Netherlands, the UK, Italy, and Singapore. More than 90% of X-VPN's VPN traffic in the US and Europe can now be served by 10 Gbps or 25 Gbps infrastructure.

Independent Security Audit Finds No Vulnerabilities

Vantage Point Security conducted a white-box source code review and protocol-level penetration test. The assessment examined how Talaria protects VPN connections throughout their lifecycle, from establishing secure sessions and handling traffic to responding safely to unexpected conditions.

The testing covered six security objectives: secure tunnel establishment, traffic confidentiality and integrity, session binding and lifecycle, forwarding controls and isolation, handling of malformed or adversarial inputs, and secure failure and resilience under network disruptions or resource pressure.

The assessment identified no security vulnerabilities of any severity. Only four observations were recorded, all of which X-VPN addressed and Vantage Point Security subsequently verified as fixed during retesting.

Talaria uses TLS 1.3 as a mandatory security foundation, together with a hybrid post-quantum key exchange combining X25519 and ML-KEM-768. This approach is designed to strengthen session key establishment against future quantum computing threats while retaining the protections of established classical cryptography.

The protocol also derives separate traffic keys for each connection and direction using TLS Exporter and HKDF. Authenticated encryption with associated data (AEAD) protects traffic confidentiality and integrity, while replay protection helps prevent previously captured packets from being reused.

The independent assessment further found that, subject to its defined scope and testing limitations, Talaria's reviewed design and use of cryptography aligned with security best practices. No demonstrated flaws were identified that undermined the protocol's security design or its underlying cryptographic primitives.

For security professionals evaluating X-VPN's in-house protocol, these findings provide independent evidence of its security design, offering a basis for assessing the technology beyond the company's own technical claims.

Talaria's Open-Source Release Extends Transparency

Building on the independent security audit, X-VPN has made Talaria open source under the GNU Affero General Public License v3.0 (AGPL v3).

Talaria's codebase is publicly available on GitHub, giving security researchers, developers, and other interested parties direct access to examine its code, review its security mechanisms, and identify potential issues.

By making Talaria open source, X-VPN is extending security transparency beyond independent assessments. The release opens the protocol to ongoing scrutiny from the wider security community as Talaria continues to evolve.

Availability

Talaria is available to X-VPN users on Windows, macOS, iOS, and Android, including both free and premium users.

The combination of faster data transport, independent security testing, and publicly accessible code reflects X-VPN's continued focus on performance and security, while giving users and security professionals greater visibility into the technology behind its VPN connections.

About X-VPN

X-VPN is a privacy and security service operated by LIGHTNINGLINK NETWORKS PTE. LTD., based in Singapore. It offers encrypted internet connections across major platforms, with both free and premium options.