Surfshark Review

Unlimited devices and a genuinely documented 2025 Deloitte ISAE 3000 no-logs audit - the strongest paper trail in the Kape/Nord orbit. But it is half of the Nord Security duopoly (merged under one holding in 2022), its pricing page is JS-only obfuscation hiding renewal rates that climb steeply after year one, and its 2026 proprietary 'Dausos' protocol drew instant community skepticism about closed-source crypto ('did Surfshark just vibe-code WireGuard with a new encryption algorithm?').

audited3 red flagsfacts reported
5.4
no user ratings yet - be the first
Visit Surfshark Read full review outbound link - currently plain redirect, no affiliate parameters
Red flags (3):
  • 2025 move of some infrastructure under the Nord Security umbrella means 'independent audits' are bought by the same holding for both brands
  • Community reports (2026-09, r/VPN) of new buffering/throughput degradation on long-term subscriptions while off-VPN is fine
  • Currency optimization + A/B price testing disclosed in own billing policy - you may pay a different renewal price than your neighbor
The renewal trap: the advertised $2.19 is the intro rate - it renews at $15.45 (7.1x). Check the 3-year total before any multi-year plan.

// Review

by the vpncomparison editorial desk · review version 5 · prose updated 2026-09-28 · facts as of 2026-09-28 · how we verify

Honesty note: we have not run our own tests on Surfshark yet (leak tests, speed, kill switch). Everything on this page is source-based meta-research with dated links. When we test it, results appear here and on the change log.

Overview

Surfshark is a commercial VPN service founded in 2018, now fully owned by Nord Security - the same holding company behind NordVPN. Based in the Netherlands, it markets unlimited devices and streaming access. Despite a 2025 Deloitte audit supporting its no-logs claim, its independence is compromised by corporate consolidation, and its pricing tactics obscure steep renewal hikes.

Logging & privacy

Surfshark claims a strict no-logs policy, backed by a 2025 Deloitte Lietuva ISAE 3000 reasonable assurance audit on its no-log configuration - among the strongest paper validations available. Additional penetration tests by SecuRing and Cure53 add infrastructure credibility. However, the audit was commissioned by its parent holding, raising questions about independence. It operates under Dutch jurisdiction (a 9 Eyes member), offers no warrant canary, and retains no user data per policy.

Pricing & the renewal trap

The introductory rate is approximately $2.19/month for a two-year term, but renews at $15.45/month - a significant increase. The 730-day contract locks you in, with only 30 days to claim a refund. No free tier exists, and while fiat payments are accepted, crypto is not offered. The total three-year cost is substantially higher than the initial promise, with renewal pricing set at full rate.

Features & performance

Surfshark supports WireGuard, OpenVPN, IKEv2, and its proprietary Dausos protocol - a closed-source, QUIC-based option launched in 2026 that drew community skepticism. It includes a kill switch, split tunneling, multihop, dedicated IP, and P2P support across 4,500 servers in 100 countries. Streaming works, but unverified user reports from mid-2026 cite buffering issues. No independent performance testing has been conducted.

Ownership & track record

Surfshark is 100% owned by Nord Security since 2022, eliminating its independence and aligning it with a corporate VPN duopoly. While audits exist, they’re funded by the same parent entity. Red flags include A/B pricing, currency optimization, and infrastructure changes under shared management. Community voices reflect loyalty but also growing concern over speed degradation and opaque protocols.

Censorship resistance

Surfshark offers NoBorders (camouflage mode) and Dausos, a proprietary obfuscated protocol, to bypass censorship in restricted regions. These tools are designed for use in countries like China or Iran, though real-world effectiveness isn't independently verified. The closed-source nature of Dausos limits trust, especially given community skepticism about its cryptographic design.

Verdict

Surfshark delivers on streaming and household coverage with a technically audited no-logs policy, but it’s part of a consolidated corporate machine with opaque pricing and rising renewal costs. Only consider it if you plan to reassess before renewal. Be aware: Surfshark runs a 40% affiliate program, heavily funding the “top 10” lists that recommend it.

++ What holds up

  • ISAE 3000 no-logs audit by Deloitte Lietuva, June 2025 - the actual 490KB report PDF is public (fetched)
  • 4,500+ servers in 100 countries stated on own servers page (fetched 2026-09-27)
  • Unlimited simultaneous devices on one subscription
  • Frequent, aggressive intro pricing

-- What to watch

  • Renewal price escalates to near full monthly price after the first term; Surfshark reserves the right to A/B-test displayed renewal prices (own terms page, fetched 2026-09-27)
  • No longer an independent company: Nord Security holding since 2022
  • Closed-source apps; proprietary Dausos protocol criticized on HN as 'rewriting WireGuard with a new encryption algorithm'
  • Marketing site JS-walls its prices behind IP-based currency games

Pricing reality check

Intro price$2.19 /month · renews $15.45
Renewal price$15.45 7.1x intro
Refund window30 days

See the 3-year total next to the marketing number: true-cost calculator →

// The money trail - what review sites earn by recommending this

has an affiliate program via in-house · published terms: 'Competitive 40% revenue share on new sales' (starting rate); CPA negotiable ('always open to discussing CPA conditions'); $100 minimum payout threshold

Main platform is Tunes (HasOffers) and Surfshark says it is also listed on Impact Radius, Avant, CJ, Appsflyer and Awin.

If we sign up for this program, every link here becomes rel="nofollow sponsored" and this box stays. Until then our links are plain redirects with zero tracking. Ranking logic physically cannot read affiliate fields - here is the proof.

Incident record (1)

  • 2021 Zerodium offers bounties for 0-days in Windows VPN clients Exploit broker Zerodium announced it would pay up to $1M+ for 0-days in NordVPN, ExpressVPN and Surfshark Windows clients - bugs that de-ano source →

Before you pay: check the renewal price, the refund window, and whether a cheaper or free path covers your use case - the honest checklist.

Visit Surfshark or compare all VPNs →

// Surfshark FAQ

Is Surfshark legit?

Based on our checks as of 2026-09-28: Surfshark scores 5.4/10 in our weighted review. We logged 3 red flags (listed above). Its logging claim is backed by an independent audit. User reports, ownership and the incident record are documented with dated sources in the meta-review below.

What do I actually get with Surfshark?

Unlimited device connections, access to 4,500+ servers in 100 countries, streaming support, and obfuscation features. Protocols include WireGuard and the proprietary Dausos, though its closed-source nature raises trust questions.

What is the renewal price, and what would I pay over three years?

Renewal starts around $15.45/month after the initial term, up from ~$2.19/month. The total three-year cost is significantly higher than the initial payment, with no guarantee of price stability beyond renewal.

What evidence supports Surfshark’s no-logs claim?

A 2025 Deloitte ISAE 3000 reasonable assurance audit and a SecuRing penetration test support the claim. However, both were commissioned by its parent company, Nord Security, affecting independence.

Does Surfshark work in censored countries like China or Iran?

It offers NoBorders mode and Dausos, a proprietary obfuscated protocol, designed for use in censored regions. Success isn’t guaranteed, and Dausos’s closed-source design limits external verification.

Can I pay for Surfshark anonymously?

No. While signup requires only an email and no KYC, payment methods are fiat-only - crypto is not accepted - so truly anonymous payment isn’t possible.

What happens if Surfshark shuts down or gets compromised?

You’d lose service access and any data protection it provided. Historical incidents include third-party 0-day bounties on its apps, and its infrastructure is now shared with Nord Security, increasing systemic risk.

What’s an honest free or cheap alternative to Surfshark?

Proton VPN’s free tier offers real no-logs privacy with limited data. For paid options, Mullvad provides flat pricing, full transparency, and anonymity - no corporate parent, no affiliate marketing.

// The meta-review: what the internet says about Surfshark

We do not expect you to trust us. This review is a meta-review: below you see what other review sites claim - with their conflicts of interest labeled - what users report on Reddit and forums, and who actually operates Surfshark. Every claim links to its source so you can verify it yourself.

// What other reviewers say (0)

Every source carries a conflict label from our review-site database. "Affiliate-funded" means the site earns money if you buy what it recommends. We include critical voices deliberately.

No third-party reviews with usable evidence found yet. For a VPN with no affiliate program that is normal - the affiliate-funded sites do not cover what does not pay.

// What users say (2)

Reddit, forums, HN - paraphrased and linked, never quoted out of context. Anecdotes, not proof - but refund complaints and leak reports are the best early-warning system this market has.

Hacker News mixed

Surfshark comments (Algolia)

2026 HN skepticism on Dausos ('did they vibe-code WireGuard?'), Private Relay comparisons.

source dated n.d. · verified by us · known site, treat as indicative

// Who is behind Surfshark?

VPN ownership is often deliberately layered through shell companies. This is what we could verify - with sources. Confidence: confirmed (checked 2026-09-27).

OwnerNord Security (Nordsec / Nord Security group, Tesonet ecosystem)
DetailOwned by nord-security since 2022 (100%)

// AI fact summary - everything we know, compressed

Generated by Qwen3 on 2026-09-28 from our fact database plus the linked sources. It summarizes - it does not add facts. Check anything that matters against the linked sources.

Bottom line: Surfshark is a mass-market VPN with a strong paper trail for no-logs due to a 2025 Deloitte audit, but it’s part of the Nord Security duopoly, has a JS-obfuscated pricing page, and users report recent performance issues. Renewal prices jump sharply after the first term, and new proprietary protocols raise red flags.

The logging truth: Claims “no logs” and has a 2025 Deloitte ISAE 3000 reasonable assurance audit confirming no-log configuration, plus a SecuRing penetration test. Audit credibility is questioned due to the 2022 merger with Nord Security, creating shared audit funding. Based in the Netherlands (EU), a jurisdiction with surveillance obligations.

Pricing reality: Intro price ~$2.19/month on a 2-year plan, but reverts to ~$15.45/month at renewal - over a 7x increase. The pricing page is JavaScript-heavy and hides final costs until login; the company openly discloses A/B testing and dynamic pricing, meaning you may pay more than others.

What reviewers say vs what users say: Affiliate reviews highlight the Deloitle audit and low intro price, but user threads on r/VPN (2026) report new buffering issues when the VPN is active, contradicting the smooth experience marketed. Hacker News and Reddit express deep skepticism about the 2026 Dausos protocol, calling it “vibe-coded” and closed-source. Conflict: official audits vs real-world user complaints on speed and transparency.

Who runs it: Owned by Nord Security since 2022 (100%), making it functionally part of the same holding as NordVPN. The entity is Surfshark B.V., based in Amsterdam, with no independent governance.

// Sources & how this review was built

Every external source used on this page, with the date we fetched it. Methodology: how we verify. Sources disappear or change - if a link is dead, tell us via contact.

  1. community Hacker News - Surfshark comments (Algolia) fetched
  2. community reddit r/VPN - Comments mentioning surfshark (arctic-shift archive) fetched
  3. news Nord Security (company) - Nord Security joins forces with Surfshark dated 2022-02-02 · fetched
  4. news ZDNet (via HN) - Surfshark releases new proprietary VPN protocol (Dausos) dated 2026-04-27 · fetched
  5. operator surfshark.com - SecuRing penetration test of network infrastructure (report 2025-12-12) dated 2025-12-12 · fetched
  6. operator surfshark.com - ISAE 3000 Independent Reasonable Assurance Report (no-log VPN), 10 June 2025 dated 2025-06-10 · fetched
  7. operator surfshark.com - Billing Practices, Currency Policy & Renewal Prices fetched
  8. operator surfshark.com - VPN servers overview fetched

// Rate Surfshark

Community score: no ratings yet

One rating per user and provider. Smoothed display (statistical prior) prevents single-vote manipulation.

// User comments (0)

No comments yet - be the first. Posting runs a short proof-of-work in your browser (anti-spam), no account needed.

// Similar providers

Mullvad VPN

The most honest VPN on the internet, and in 2026 still the one this industry is measured against: numbered accounts, cash or Monero accepted, open-source client

8.9
court-proven no-logs audit open source crypto accepted
intro $5.71 /month
Sweden commercial vpn 7 h ago

IVPN

The anti-affiliate champion candidate holds up: no affiliate program (stated out loud on the homepage), flat honest pricing, quarterly warrant canary, annual th

8
audited canary open source crypto accepted
intro $6 /month
Gibraltar (IVPN Limited, registered in Gibraltar; founder/operated since 2009) commercial vpn 7 h ago

Private Internet Access

The best-evidenced no-logs claim in the business - twice tested in US courts (2016, 2018) and twice found to have nothing - plus the cheapest long-term renewal

7.7
court-proven no-logs audit open source
intro $2.03 /month
United States commercial vpn 7 h ago