• A Windscribe update from July 2026 appears to credit AI engine Fable for identifying necessary fixes
• The AI audit successfully spotted complex vulnerabilities across the provider's Windows, macOS, and Linux applications.
• Rival providers remain seriously apprehensive of the technology, warning of the possible consequences of error.

Windscribe appears to have quietly revealed that it used artificial intelligence to audit its software.

Hidden within the changelog for release 2.33.11, deployed on July 6, 2026, the company mentions that the update includes security fixes stemming directly from an AI review by Fable 5, an advanced AI model developed by Anthropic.

Should this be true, it’d be the first instance of a commercial VPN provider relying on a large language model to conduct a comprehensive security evaluation of its core infrastructure.

What did the Fable 5 audit find?

A closer look at the release notes shows that the Fable 5 audit successfully identified highly technical areas for improvement, helping developers secure the app against potential local attacks and data leaks.

According to Windscribe, the update includes "App hardening from the Fable 5 audit, including WireGuard key validation, Control D API key log redaction, IPC exposure hardening, safer logging, installer argument redaction, and package/dependency handling fixes."

In simpler terms, the audit identified several ways to secure how the VPN handles encryption keys for the popular WireGuard protocol and ensure that sensitive API keys aren’t accidentally saved in the software's error logs.

It also identified how Windscribe could tighten up how different parts of the application communicate with each other (known as IPC exposure), which stops bad actors from exploiting the app locally on your device.

The changelog also lists a staggering number of accompanying fixes deployed in this same update. Windscribe patched a "DLL planting vulnerability" in its Windows bootstrapper, a flaw where malicious code could be loaded in place of a legitimate file, and resolved a local privilege escalation vulnerability on Linux.

Will AI replace human audits?

Historically, VPN providers undergo independent, third-party audits to prove they do not keep logs of user activity or harbor hidden security flaws.

While an AI like Anthropic's Fable 5 can process vast amounts of code rapidly, its use raises new questions about transparency.

Can an AI audit provide the same level of assurance as a human expert? Rival providers are highly skeptical about completely handing the reins over to machines.

Speaking to TechRadar, Tomas Stamulis, CSO at Surfshark, explained that while the company uses AI models internally to spot vulnerabilities "at a scale and speed impossible for humans," formal public audits still require a human touch.

"We currently rely on independent, qualified auditors, such as Deloitte or Cure53, for our formal audits," Stamulis told us. "We strongly believe that independent validation requires external human oversight to maintain contextual analysis and ensure reliability."

Stamulis warned that relying entirely on an AI for external validation carries unique risks, particularly regarding how these language models are fed information.

He noted that "given the risk that AI findings could be manipulated through context and prompting, human-led independent oversight remains the only way to provide the level of contextual analysis and manipulation-proof assurance that authorities and customers expect."

We are still waiting to hear back from Windscribe regarding their decision to prioritize an AI-driven approach for this specific update.

However, as the industry continues bolstering protections against advanced threats, AI auditing, whether used internally or publicly, represents the next major evolution in digital privacy.

• Andy Yen, founder and CEO of Proton, takes the 27th Liberal Award
• JFZH cites his record on privacy, start-ups, and tech sovereignty
• The November 12 ceremony coincides with Switzerland’s second surveillance consultation

Andy Yen, founder and CEO of Proton, has won the 2026 Liberal Award.

The prize is handed out each year by the Jungfreisinnige Kanton Zürich (JFZH), the Young Liberals of the Canton of Zurich, to someone judged to have made a significant contribution to a liberal society.

His company is best known for its privacy suite: Proton Mail, Proton VPN – one of the best VPN services on the market – along with Proton Drive and Proton Pass. The JFZH credits Yen with building a European alternative to the major US tech platforms, and with making the case for privacy at a time when Swiss surveillance rules are back in play.

From CERN to a 100-million-user company

Yen’s route into tech ran through physics. He holds a PhD in particle physics from Harvard and worked as a research scientist at CERN in Geneva before turning to building Proton, which is headquartered in the same city.

The company now employs more than 700 people, 60 of them in the Canton of Zurich, and says it serves over 100 million customers worldwide. It’s majority-owned by the non-profit Proton Foundation – a structure Proton presents as a safeguard against the pressures that typically come with venture capital.

“Andy Yen stands up for what matters to us as well: the right to privacy and the presumption of innocence instead of blanket suspicion,” said Mikhail Shalaev, president of the JFZH. “He champions better conditions so that start-ups can grow from Switzerland. And Proton is building in Europe the key technologies that will allow our continent to remain self-determined in the future.”

An award tied to a surveillance debate

The JFZH is explicit about the timing. Switzerland’s Federal Council plans to revise the Ordinance on the Surveillance of Postal and Telecommunications Traffic (VÜPF), a move critics warn could introduce indiscriminate mass surveillance through mandatory data retention.

The revised ordinance was overwhelmingly rejected in the first public consultation. The Federal Council has since commissioned a regulatory impact assessment and scheduled a second consultation for November 2026.

“The Federal Council must protect privacy instead of risking an exodus of our most innovative tech companies,” Shalaev added.

What happens next

Yen joins past recipients including media entrepreneur Roger Schawinski, former federal councillors Pascal Couchepin, Kaspar Villiger, and Guy Parmelin, the Swiss Institute for Economic Policy (IWP), and Argentina’s deregulation minister Federico Sturzenegger.

The ceremony takes place on Thursday, November 12 2026 at Westhive in Zurich.

For Proton, the timing matters as much as the recognition. The company has spent years arguing that Europe needs its own privacy infrastructure rather than relying on US providers – a case the JFZH is making, and one that lands harder while the Federal Council debates data retention.