Surfshark Review - Cloudwards
Fetched 2026-09-28: Starter 1-mo $15.45 / 15-mo $3.19 / 2-yr+3mo $1.99 ($53.73); 'renewal fees vary' caveat; CleanWeb, dynamic MultiHop, dedicated IP add-on $3.75/mo, rotating IP; unlimited devices.
Unlimited devices and a genuinely documented 2025 Deloitte ISAE 3000 no-logs audit - the strongest paper trail in the Kape/Nord orbit. But it is half of the Nord Security duopoly (merged under one holding in 2022), its pricing page is JS-only obfuscation hiding renewal rates that climb steeply after year one, and its 2026 proprietary 'Dausos' protocol drew instant community skepticism about closed-source crypto ('did Surfshark just vibe-code WireGuard with a new encryption algorithm?').
site reachable · checked 19 h ago · daily check
draft generated by Qwen3, fact-checked by the vpncomparison editorial desk · review version 8 · prose updated 2026-10-26 · facts as of 2026-10-01 · how we verify

Surfshark is a commercial VPN service based in the Netherlands, owned by Nord Security since 2022. It offers unlimited devices and streaming access, backed by a 2025 Deloitte audit of its no-logs configuration. However, its pricing is opaque - intro and renewal rates are not verified due to geo-pricing and A/B testing - and it operates within a growing corporate duopoly.
Surfshark claims a no-logs policy, supported by a 2025 Deloitte Lietuva ISAE 3000 reasonable assurance audit focused on its no-log configuration, plus a 2025 SecuRing infrastructure penetration test. These are stronger than policy-only claims, but the audit was commissioned by Nord Security, which also owns NordVPN, raising questions about independence. Based in the Netherlands (a 14-Eyes country), Surfshark lacks a warrant canary, and while the Deloitte report adds credibility, it does not cover real-time data handling.

Surfshark’s pricing is unverified: the operator uses geo-specific pricing and A/B testing, with no published renewal figures. The plan structure offers an intro rate for 27 months, after which renewal pricing applies - but exact amounts are undisclosed.Renewal figures are not verified, so no renewal ratio or 3-year total can be calculated. A 30-day refund window exists, but without transparent renewal costs, long-term budgeting is guesswork. Payment is fiat-only; no anonymous crypto options.

Surfshark supports WireGuard, OpenVPN, IKEv2, and its proprietary Dausos protocol (launched 2026), plus obfuscation via NoBorders mode. It includes a kill switch, split tunneling, multihop, and dedicated IP (paid add-on). It supports P2P and streaming, with 4,500+ servers across 100 countries and apps for all major platforms, including Fire TV and Apple TV. No independent performance tests have been run, but community reports from 2026 note buffering issues during streaming when the VPN is active.
Surfshark is 100% owned by Nord Security, forming a duopoly with NordVPN under one holding company since 2022. This consolidation means shared audit spending and overlapping marketing, with Reddit users noting skepticism about both brands sponsoring nearly every review site. A 2021 incident involved Zerodium offering bounties for 0-day exploits in its Windows client. Community voices are mixed: some report loyalty and successful streaming workarounds, while others cite new performance issues and ad fatigue.
Surfshark offers NoBorders (camouflage) mode for obfuscating traffic in censored regions and has launched Dausos, a proprietary QUIC-based protocol. However, Dausos is closed-source and unaudited, drawing community skepticism. While obfuscation exists, there is no evidence it reliably works in high-censorship environments like China or Iran. For such use, audited, open-source tools with proven obfuscation (like Shadowsocks or Tor) are better choices.
Surfshark delivers unlimited devices and a credible 2025 Deloitte no-logs audit, making it a decent pick for households wanting streaming access. But its opaque, A/B-tested pricing and lack of renewal transparency make it risky for long-term use. It pays affiliate networks heavily - expect to see it everywhere - and operates under the same umbrella as NordVPN, reducing true independence.
| Intro price | see provider site |
|---|---|
| Refund window | 30 days |
| Notes | Renewal price not published (A/B testing + geo pricing disclosed by the operator). The former $15.45 "renewal" was the 1-month plan price from a review site - removed. |
See the 3-year total next to the marketing number: true-cost calculator →
| Sign up at | surfshark.com |
|---|---|
| Identity check | none |
| Payment | fiat |
| Money-back window | 30 days |
| Apps | windows, mac, linux, android, ios, router … |
Check the renewal price above before any multi-year plan - true-cost calculator.
Surfshark is operated by Nord Security. Logging claim: No logs - evidence class: independently audited. Our incident log carries 1 documented incident(s) for this operator - see the record below. Facts reported (not fully verified) as of 2026-10-01 - read the sources below.
Evidence classes and scoring: methodology · user experiences: meta-review.
has an affiliate program via in-house · published terms: 'Competitive 40% revenue share on new sales' (starting rate); CPA negotiable ('always open to discussing CPA conditions'); $100 minimum payout threshold
Main platform is Tunes (HasOffers) and Surfshark says it is also listed on Impact Radius, Avant, CJ, Appsflyer and Awin.
If we sign up for this program, every link here becomes rel="nofollow sponsored" and routes through /go/. Until then our links point straight to the provider's website with zero tracking. Ranking logic physically cannot read affiliate fields - here is the proof.
Before you pay: check the renewal price, the refund window, and whether a cheaper or free path covers your use case - the honest checklist.
Based on our checks as of 2026-10-01: Surfshark scores 4.7/10 in our weighted review. We logged 3 red flags (listed above). Its logging claim is backed by an independent audit. User reports, ownership and the incident record are documented with dated sources in the meta-review below.
Unlimited device connections, 4,500+ servers in 100 countries, streaming and P2P support, and apps for all major platforms including Fire TV and Apple TV. No free tier is offered.
Exact renewal pricing is not published - Surfshark uses A/B and geo-based testing, so your rate may differ. The `derived_pricing` data shows no calculable renewal ratio or three-year total due to missing figures.
A 2025 Deloitte Lietuva ISAE 3000 audit provides reasonable assurance on its no-log configuration, plus a 2025 SecuRing penetration test. However, the audit was commissioned by its parent company, Nord Security, which also owns NordVPN.
It offers NoBorders obfuscation and the new Dausos protocol, but there’s no verified evidence it works reliably in high-censorship environments. Closed-source protocols like Dausos raise trust concerns.
No. Surfshark accepts only fiat payments and does not support cryptocurrency. While signup requires only email (no KYC), your payment method will be traceable.
As part of Nord Security, it’s unlikely to vanish suddenly. However, if it does, your subscription ends and refunds are limited to the 30-day window. No data recovery mechanism is advertised.
Proton VPN offers a permanent free tier with no logs (audited), based in Switzerland. For paid options, Mullvad (flat €5/month, anonymous accounts) or IVPN (independent, transparent) are more privacy-respecting alternatives.
Comparable providers of the same kind only - a free app is never "an alternative" to a commercial VPN. Ranked by the same deterministic score.
A rare genuinely usable free plan (no card, P2P allowed on the 10 GB free tier) plus audited no-logs claims twice over - DefenseCode 2015 and Securitum 2024…
The most honest VPN on the internet, and in 2026 still the one this industry is measured against: numbered accounts, cash or Monero accepted, open-source…
The anti-affiliate champion candidate holds up: no affiliate program (stated out loud on the homepage), flat honest pricing, quarterly warrant canary, annual…
No comments yet - be the first. Posting runs a short proof-of-work in your browser (anti-spam), no account needed.