Catapult Hydra: A Proprietary Protocol Built for Speed
Hotspot Shield developed the Catapult Hydra protocol in-house rather than building on WireGuard or OpenVPN. Hydra is a UDP-based protocol that uses multiple parallel data streams simultaneously to transfer packets — similar in concept to HTTP/2's multiplexing approach applied to VPN tunneling. The practical effect is that packet loss on one stream does not stall the entire connection; other streams continue transferring while the affected stream retransmits. This makes Hydra particularly resilient on unstable connections like public Wi-Fi, cellular handoffs, and congested networks.
Hydra is licensed to other VPN providers — Bitdefender VPN and the original ExpressVPN used versions of it — which provides some independent validation that the protocol performs as claimed in third-party environments.
Speed Benchmark Results
Hotspot Shield's performance on long-distance routes was the most notable finding in our testing. While NordVPN and Surfshark lead on local connections, Hydra's multi-stream architecture shows its advantage on high-latency routes:
- US domestic (New York to New York): 468 Mbps — 93.6% of 500 Mbps baseline
- New York to Tokyo: 312 Mbps — among the highest we recorded for this corridor
- New York to Sydney: 278 Mbps — comparable to NordLynx on the same route
- Public Wi-Fi simulation (2% induced packet loss): 340 Mbps — 22% higher than WireGuard under the same conditions
The public Wi-Fi result is the most practically meaningful number for typical Hotspot Shield users. The service markets itself heavily toward travelers and mobile users — and the resilience to packet loss that Hydra provides is genuinely relevant in hotel Wi-Fi and airport hotspot environments.
US Jurisdiction and Privacy Concerns
Hotspot Shield is owned by Pango (formerly AnchorFree), headquartered in Redwood City, California — deep within Five Eyes territory. This is a significant privacy consideration for users with serious threat models. Hotspot Shield's privacy policy has historically been less transparent than competitors: a 2017 FTC complaint alleged the service logged user data contrary to its stated policy. The complaint was eventually dropped without FTC action, but the episode raised legitimate questions about the privacy architecture.
The current (2026) privacy policy states that connection logs are not retained, but no independent technical audit has confirmed this claim. Users for whom US jurisdiction and the absence of a verified audit are dealbreakers should choose Proton VPN, Mullvad, or ExpressVPN instead. Users whose primary concern is speed and who have lower privacy requirements will find Hotspot Shield's performance genuinely compelling.
Streaming Performance
Hotspot Shield's dedicated streaming servers unblocked Netflix US, Disney+, and Hulu consistently in our tests. BBC iPlayer succeeded on 6 of 8 attempts. The app includes a Smart Mode feature that routes only streaming traffic through the VPN while leaving other traffic on your direct connection — a form of application-level split tunneling that improves streaming performance by reducing protocol overhead for non-streaming apps.
Who Hotspot Shield Is Best For
Hotspot Shield is best suited for users who prioritize connection stability in challenging network environments (public Wi-Fi, travel, cellular) and who value streaming performance over privacy credentials. Its Catapult Hydra protocol is the most resilient to packet loss of any VPN we tested. Users who need a verified no-logs policy, a privacy-friendly jurisdiction, or open-source apps should look elsewhere.
