NordVPN Review

Review

by the vpncomparison editorial desk · review version 4 · prose updated 2026-10-06 · facts as of 2026-10-01 · how we verify

Overview

NordVPN is a commercial VPN founded in 2012 and operated by Nord Security, a Lithuanian company that works within the broader network of Tesonet, a startup accelerator and business incubator [10]. It runs one of the largest fleets in the industry - 7,287 servers in 150 countries, counted directly in Nord's own public API on 2026-10-01 [11] - and its no-logs policy has been audited repeatedly since 2018 [4]. Three caveats belong in the first paragraph, not the footnotes: the renewal price is about 3.3 times the promotional intro [12], the 2018 breach of a rented server was disclosed nineteen months late [7], and Surfshark, marketed as an independent competitor, has shared one owner with NordVPN since February 2022 [9].

Logging & privacy

The claim is "no logs", and NordVPN is one of the few vendors that put the policy through a decade of independent checks: PricewaterhouseCoopers audited it in 2018 and 2020, then Deloitte in 2022, 2023, 2024, and again in an audit announced October 2025 [10] [4]. An audit is a snapshot - it tests what the auditor could see at audit time, not what happens the year after. The incident that keeps us from treating it as settled is from March 2018: an attacker accessed a rented Finnish datacenter server holding OpenVPN/TLS key material, and NordVPN told users only in October 2019 [7]. The vendor and reviewers describe RAM-only server infrastructure as part of the audited setup [19]. Registration is in Panama; operations sit in Lithuania, the UK, Panama, and the Netherlands [10]. There is no published warrant canary. Signup needs only an email and no KYC, and since 2022 the same holding group also owns Surfshark [9] - so the two brands' policies, staffing, and infrastructure decisions are made under one roof.

Pricing & the renewal trap

The operator's own renewal-pricing page, "Last updated June 10, 2026", lists the Basic plan's 1-year renewal at $139.08 per year - about $11.59 per month [12]. The promotional intro is $3.49 per month on the Basic 2-year plan, billed as $94.23 for the first 27 months on the operator's own pricing page [12]; Cloudwards' $2.99 figure refers to the Standard tier's 2-year-plus-3-months plan - a different tier, not a contradiction [20]. That is a renewal factor of roughly 3.3x. A first three years on Basic looks like this: $94.23 for the 27-month intro term, then one renewal year at $139.08 - $233.31 total in two charges [12]. One structural detail from the same page: the operator explicitly discloses A/B price testing, meaning the renewal price you see may differ from another user's [12]. Payment covers credit card, cryptocurrency, PayPal, Sofort/Klarna, bank transfer, prepaid cards, and app-store rails; cash is possible through a retail-store purchase [13]. The 30-day money-back guarantee applies to new subscriptions only, not to renewals [14]. A 7-day free trial exists for new users in listed countries through app-store channels [15].

Features & performance

The public server API tags WireGuard, OpenVPN TCP and UDP (each with dedicated-IP and obfuscated variants), IKEv2/IPSec, the proprietary NordWhisper protocol in TCP and UDP flavors, SOCKS5, and the legacy CyberSec proxy [11]. Kill switch, split tunneling, multi-hop, Tor-over-VPN, dedicated IP (add-on), and P2P tiers are documented features [11]. Streaming unblocking is consistently reported by independent reviewers [19]. We have not run our own performance tests; RestorePrivacy's NordLynx local test reported roughly 95 percent speed retention, which we pass along without verification [19]. Also worth knowing: exploit broker Zerodium has offered a $1M+ bounty for de-anonymizing zero-days in NordVPN's Windows client since October 2021 - standing adversarial pressure, not evidence of any specific vulnerability [6].

Ownership & track record

Nord Security raised its first outside funding in April 2022 - $100M at a $1.6B valuation [5] - and merged with Surfshark in February 2022 under one owner [9]. The brand's ecosystem ancestry runs through Tesonet, a Lithuanian startup accelerator and business incubator; the operational footprint spans Lithuania, the UK, Panama, and the Netherlands [10]. The track-record entry that matters most is the 2018 breach and its nineteen-month disclosure delay [7]. On this page, operator figures (servers, pricing) and review figures (speeds) are labeled as such; we do not present them as independently verified.

Censorship resistance

Obfuscated OpenVPN over TCP 443 and NordWhisper exist specifically to survive network filtering [11], and reviewers report the service works against moderate filtering. We have not tested it from inside a censored network, and we deliberately do not claim China-class reliability for any commercial VPN without independent measurement.

Verdict

A strong everyday VPN: huge live-verifiable fleet [11], a real audit history [4], and full feature coverage [11]. Its documented weak points are the ~3.3x renewal jump [12], the late-disclosed 2018 breach [7], and the shared ownership with Surfshark [9]. Good for streaming and ISP privacy; look elsewhere for anonymity-critical work.

NordVPN FAQ