Recorded Future expects Russia's VPN blocks to raise operating risk but stop short of a sovereign internet
Recorded Future's Insikt Group assesses that Russia's VPN, platform and shutdown controls since mid-2025 will likely fall short of a sovereign internet. Organizations operating in Russia face rising surveillance and legal risk from the controls, Insikt says.
The Watch · Security desk
Exposure map. Organizations in Russia face surveillance, data exposure, legal risk and disrupted communications and tools. Indirectly exposed entities face supply-chain and sanctions risk and fewer open sources. Platforms are very likely forced to support VPN blocks; VPN use gets costlier.
- exposure Organizations in Russia Face surveillance and exposure of sensitive data, plus increasing legal risks, claim 6
- constraint Organizations in Russia Challenges in emergency communications and disruptions to corporate tools and apps, claim 6
- cost Entities with indirect exposure Increased likelihood of supply-chain disruptions and sanctions violations, claim 7
- constraint Entities with indirect exposure Longer-term challenges assessing Russia as restrictions limit high-quality open sources, claim 7
- decision Platforms Very likely forced by the Kremlin to support VPN blocks, claim 9
- cost VPN users VPN use made more expensive and inconvenient; direct penalties on individuals likely avoided, claim 9
| Who | How | Kind | Claim |
|---|---|---|---|
| Organizations in Russia | Face surveillance and exposure of sensitive data, plus increasing legal risks | exposure | 6 |
| Organizations in Russia | Challenges in emergency communications and disruptions to corporate tools and apps | constraint | 6 |
| Entities with indirect exposure | Increased likelihood of supply-chain disruptions and sanctions violations | cost | 7 |
| Entities with indirect exposure | Longer-term challenges assessing Russia as restrictions limit high-quality open sources | constraint | 7 |
| Platforms | Very likely forced by the Kremlin to support VPN blocks | decision | 9 |
| VPN users | VPN use made more expensive and inconvenient; direct penalties on individuals likely avoided | cost | 9 |
What happened
- Since July 2025 the Kremlin has tightened access to civilian messaging apps and VPNs, caused regular mobile outages, and put Russian and foreign firms under added surveillance requirements.
- Insikt rates it very likely that Moscow is using managed internet shutdowns to test and improve its ability to isolate the Russian internet.
- Insikt expects the Kremlin to deter VPN use by forcing platforms to support blocks and making VPNs costlier and less convenient, while likely avoiding direct penalties on individual users.
- Falling approval ratings for Putin, economic strain and Ukrainian drone strikes very likely push Moscow toward further restrictions despite reported public dissatisfaction.
Why it matters
- exposure Companies with staff in Russia should plan for emergency communications that may fail during a shutdown, corporate tools that may stop working, and sensitive data the state can see.
- exposure Firms with only indirect Russian exposure, such as suppliers and counterparties, carry a higher chance of supply-chain disruption and of sanctions violations.
- constraint Restrictions are thinning the high-quality open sources analysts use, so judging Russia's political and economic position will get harder over time.
- decision Because controls are expected to be strict but not absolute, the planning case is recurring partial disruption and tighter limits on circumvention tools, not a single clean cutoff.
Insikt's sovereignty call is the lower-confidence half of the report. It says continued VPN deterrence is "very likely" [9] and that the post-2024 measures "very likely" mark an escalation [14]. The shortfall in a fully "sovereign internet" is only "likely", and only for the near term [3]. In our view, planning should follow the stronger calls.
The shortfall applies to isolation. Insikt lists two objectives: surveillance of online activity while Russia stays connected to the global internet, and national infrastructure under Kremlin control that would let it cut Russia off if it chose [5]. On the first, Insikt says the efforts have "almost certainly" given the Kremlin a better ability to control and monitor domestic online discourse [13]. A company with staff in Russia should assume the monitoring already works, even if a full cutoff never comes.
The trajectory is long. Insikt dates the decline in Russians' ability to operate freely online to 2012, in several waves, driven by the Kremlin's calculation that people were using the internet to organize anti-government action [10]. The 2014 Lugovoy Law (No. 398-FZ) allowed extrajudicial blocking of websites [12]. Insikt says the Kremlin likely views the current measures as necessary to make political coordination harder and to hinder Ukrainian drone strikes on critical infrastructure [11].
The report's summary and key findings do not include mitigation steps or dates for individual shutdowns. This is a policy risk with no CVE and no patch. The cost falls on continuity planning for tools and channels that may not work when a region goes dark.
What to watch
- New Russian rules that oblige platforms to support VPN blocks, which Insikt expects to continue.
- Any move from pressure on platforms to direct penalties on individual VPN users, which Insikt considers unlikely.
- Evidence that Russia can isolate its internet beyond managed shutdowns, which would contradict Insikt's near-term call.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap
- Insufficient
- Incentives55
- Confidence50
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
Since mid-2025 the Kremlin has intensified restrictions on digital communications and infrastructure, very likely to suppress the organization of domestic political dissent and conduct digital surveillance within Russia.
- [2]
Since July 2025 the Kremlin has systematically tightened access to widely used civilian communications applications and VPNs, caused regular mobile internet outages across Russia, and instituted requirements that place Russian and foreign individuals and firms under increased government surveillance.
- [3]
Technical and political limitations will likely prevent the Kremlin from achieving a fully 'sovereign internet' in the near term.
- [4]
The most likely scenario is that Moscow exerts extensive censorship and monitoring of online activity with increasingly strict, though not absolute, controls on circumvention and anonymizing tools.
- [5]
Insikt assesses the Kremlin's primary objectives are twofold: extensive surveillance of online activity supporting control of the domestic information space while maintaining connectivity to the global internet, and developing national internet infrastructure under Kremlin control that enables isolation from the global internet if the Kremlin so chooses.
- [6]
Individuals and organizations operating in Russia face increasing operational risks, including surveillance and exposure of sensitive data, challenges in conducting emergency communications, disruptions to corporate tools and digital applications, and legal risks.
- [7]
Entities with indirect exposure to Russia face an increased likelihood of supply-chain disruptions and sanctions violations and, over the longer term, face challenges assessing the political and economic situation in Russia because restrictions limit the availability of high-quality open sources.
- [8]
In the near to medium term, falling approval ratings for Putin, declining public opinion amid economic strain, and ongoing Ukrainian drone strikes very likely incentivize Moscow to impose further internet restrictions, regardless of reported public dissatisfaction with some measures.
- [9]
The Kremlin will very likely continue to deter VPN use by forcing platforms to support VPN blocks and making VPN use more expensive and inconvenient, though likely avoiding direct punitive measures against individual users.
- [10]
Since 2012 Russians have seen their ability to operate without restriction on the internet decline in several waves, primarily driven by the Kremlin's calculation that Russians were using the internet to organize anti-government political actions.
- [11]
The Kremlin likely views these measures as necessary to make it more difficult for Russian elites or the public to coordinate political dissent, and for the Ukrainian government to launch drone strikes against Russian critical infrastructure.
- [12]
In 2014 the Kremlin passed the Lugovoy Law (No. 398-FZ), allowing extrajudicial blocking of websites.
- [13]
The Kremlin's efforts have almost certainly provided it with enhanced ability to control and monitor domestic online discourse.
- [14]
Increasingly strict measures on VPNs, state-managed shutdowns, limits on civilian communications platforms and monitoring of domestic and foreign entities very likely represent an escalation from the approaches to censorship and surveillance pursued prior to 2024.
- [15]
The Kremlin is very likely using managed internet shutdowns across Russia to test and improve its ability to isolate the Russian internet.
Get this ledger inside ChatGPT. Ask about any of our stories and the answer brings its figure, each claim’s verdict and the sources. Free, no account.
Sources
1 independent publisher whose own reporting we read for this story.
- recordedfuture.comRussia Is Tightening Internet Controls, Leading to Operational Risks
1 article · October 14, 2026
Topics and entities
Follow any of these and your For You feed starts watching them — no settings page required.
Topics
- Threat Intelligence and Incident ResponseFollow
- Russia internet censorshipFollow
- VPN restrictionsFollow
Entities
- Recorded FutureFollow
- RoskomnadzorFollow
- KremlinFollow
- Vladimir PutinFollow