The number of VPN service purchases in the public sector and business increased by 18.5% at the end of 2025. They reached 10.3 thousand units. The total volume of contracts decreased by 25%, amounting to 24.5 billion rubles, Forbes writes with reference to the research company "SKB Kontur".
Analysts believe that the average cost of a VPN purchase contract was 2.44 million rubles, which is 38% lower compared to the previous year. State institutions allocated 19.87 billion rubles for the purchase of services, carrying out 4.3 thousand procedures under 44-FZ. In 2024, there were 4.1 thousand similar events for the amount of 29.18 billion rubles. Among the customers under 44-FZ are ministries, departments, regional and municipal authorities, as well as educational institutions and medical institutions.
As explained in "SKB Kontur", state organizations use VPN services for secure access to state systems, communication between branches and remote work of employees. State corporations and large companies need these services to combine networks and protect corporate IT resources.
As of the beginning of January 2026, access to 439 VPN services was restricted in Russia, according to information from Roskomnadzor. In October 2025, the service reported an increase in blocking by 31%. In December 2025, Roskomnadzor began to more actively block additional VPN protocols, such as SOCKS5, VLESS and L2TP.
Since 2017, VPN providers in Russia have been required to restrict access to prohibited resources, otherwise the service itself is threatened with blocking. In March 2024, a ban on the dissemination of information about methods of circumventing blocking came into force, and in September 2025, a law was passed against advertising the relevant software. Fines for advertising violations can reach 80 thousand rubles for citizens and up to 500 thousand rubles for legal entities.
As Pavel Kovalenko, director of the fraud control center of Informzashchita, noted, VPN blocking is carried out by Roskomnadzor through Internet provider filters, which analyze "fingerprints" of traffic, identifying them by IP addresses, ports and types of encryption.
Read more materials: