 | |
| Company type | Subsidiary |
|---|---|
| Industry | Computer security software |
| Founded | 2005 |
| Founder | Jack Cator |
| Headquarters | United Kingdom |
Area served | Global |
| Products | VPN software |
| Parent | Avast (Gen Digital) |
| Website | www |
HMA (formerly HideMyAss!) is a VPN service founded in 2005 in the United Kingdom. It has been a subsidiary of the Czech cybersecurity company Avast since 2016.
HMA was created in 2005 in Norfolk, England by Jack Cator.[1][2] At the time, Cator was sixteen years-old.[3] He created HMA in order to circumvent restrictions his school had on accessing games or music from their network.[3] According to Cator, the first HMA service was created in just a few hours using open-source code.[3][2] The first product was a free proxy website where users typed in a URL and it delivered the website in the user's web browser.[4]
Cator promoted the tool in online forums[3] and it was featured on the front page of digg.[2][5] After attracting more than one thousand users, Cator incorporated ads.[2] HMA did not take any venture capital funding.[3][2] It generated about $1,000 - $2,000 per month while the founder went to college to pursue a degree in computer science.[2] In 2009, Cator dropped out of college to focus on HMA and added a paid VPN service.[3][2][1] Most early HMA employees were freelancers found on oDesk.[2] In 2012, one of the freelancers set up a competing business.[3] HMA responded by hiring its contractors as full-time employees and establishing physical offices in London.[3][5]
In 2012, the United Kingdom's government sent HMA a court order demanding it provide information about Cody Andrew Kretsinger's use of HMA's service to hack Sony as a member of the LulzSec hacking group.[4][6][7] HMA provided the information to authorities.[6] HMA said it was a violation of the company's terms of use to use its software for illegal activities.[8]
In 2013, HMA added software to anonymize internet traffic from mobile devices.[9] In 2014, the company introduced HideMyPhone! service, which allowed mobile phone users to make their calls appear to come from a different location.[5]
By 2014, the service had 10 million users and 215,000 paying subscribers of its VPN service.[5] It made £11 million in revenue that year.[2] HMA had 100 staff and established international offices in Belgrade and Kyiv.[5][3]
By 2015, HMA became one of the largest VPN providers.[10][3] In May 2015, it was acquired by AVG Technologies for $40 million with a $20 million earn-out upon achievement of milestones,[11] and became part of Avast after its 2016 acquisition of AVG Technologies.[12]
In 2017, a security vulnerability was discovered that allowed hackers with access to a user's laptop to obtain elevated privileges on the device. HMA corrected the vulnerability days later.[13][14]
In 2019, it was reported that HMA received a directive from Russian authorities to join a state sponsored registry of banned websites, which would prevent Russian HMA users from circumventing Russian state censorship. HMA was reportedly given one month to comply, or face blocking by Russian authorities.[15]
In 2020, HMA introduced a no-log policy for their VPN service. Under the policy HMA will not log a user’s original IP address, DNS queries, online activity, amount of data transferred or VPN connection timestamps.[16] Following HMA’s introduction of a no-log policy, HMA’s VPN was awarded a low risk user privacy impact rating for its no-logging policy, after it was independently audited by third-party cybersecurity firm VerSprite.[17]
HMA provides digital software and services intended to help users remain anonymous online and encrypt their online traffic.[14] Its software is used to access websites that may be blocked in the user's country, to anonymize information that could otherwise be used by hackers, and to do something unscrupulous without being identified.[3] HMA's privacy policy and terms of use prohibit using it for illegal activity.[18]
HMA hides the user's IP address and other identifying information by routing the user's internet traffic through a remote server.[14][19] However, experts note that the company does log some connection data including the originating IP address, the duration of each VPN session, and the amount of bandwidth used.[10][20][21]
As of May 2018, the company had 830 servers in 280 locations across the globe and provided over 3000 IP addresses.[21] The software also includes a kill switch across all platforms.[22][23]
According to Invisibler, HMA VPN appears to have cooperated with US authorities in handing over logs in a hacking case. This led to the arrest of a hacker in what is known as the "LulzSec fiasco".
In 2015, a review in Tom's Hardware said HMA was easy to use, had good customer service, and a large number of server locations to choose from, but criticized it for slowing internet speeds.[24] In contrast, Digital Trends said HMA had strong speeds and good server selection, but wasn't fool-proof at ensuring anonymity, because it stored user activity logs[10] (in 2020, HMA announced that it would no longer log user activity[25]). In 2017, PC World noted that it was difficult to measure the effect a VPN service has on internet speed, because of variables like location, internet service speeds, and hardware.[26]
A 2016 review in PCMag gave the HMA Android app 3 out of 5 stars.[27] It praised HMA for its server selection and user interface, but criticized it for price, speed, and the lack of advanced features.[27] In 2018, PCMag gave similar feedback on the HMA VPN service.[19] PC World’s 2017 review also praised HMA's simple user interface, but criticized the lack of advanced features, saying the software was ideal for casual users that do not need advanced configuration options.[26]
