Pakistan Telecommunication Authority (PTA) introduces new framework for legal, secure, and transparent VPN usage under CVAS-Data regime.
The Pakistan Telecommunication Authority (PTA) has officially begun licensing Virtual Private Network (VPN) service providers under the reinstated Class Value Added Services (CVAS-Data) framework — a move aimed at regulating and securing VPN usage across the country.
PTA Grants Licenses to Five VPN Providers
In its latest announcement, the PTA confirmed that five companies have been authorized to operate as licensed VPN providers in Pakistan.
These include:
-
Alpha 3 Cubic (Pvt.) Ltd. – Steer Lucid
-
Zettabyte (Pvt.) Ltd. – Crest VPN
-
Nexilium Tech (SMC-Pvt.) Ltd. – Kestrel VPN
-
UKI Conic Solutions (SMC-Pvt.) Ltd. – QuiXure VPN
-
Vision Tech 360 (Pvt.) Ltd. – Kryptonyme VPN
The licensed operators are now permitted to provide VPN services to individuals and businesses for legitimate and lawful purposes, in line with national cybersecurity and data protection laws.
Simplified Access and Enhanced Data Security
Under the new policy, users no longer need to register VPNs directly with the PTA or share IP and mobile details for approval. Instead, they can purchase secure and compliant VPN services from licensed providers.
According to the authority, this system will simplify access for consumers, improve business compliance, and reduce the risks associated with unregistered or unauthorized VPNs, which often pose data privacy and national security concerns.
PTA stated that the licensing move is part of a broader digital governance initiative designed to create a safer, transparent, and cyber-resilient internet ecosystem in Pakistan. By channeling VPN use through approved entities, the regulator hopes to strike a balance between online privacy and national security.

