4.7
our score no user ratings - rate it →

Surfshark Review

Unlimited devices and a genuinely documented 2025 Deloitte ISAE 3000 no-logs audit - the strongest paper trail in the Kape/Nord orbit. But it is half of the Nord Security duopoly (merged under one holding in 2022), its pricing page is JS-only obfuscation hiding renewal rates that climb steeply after year one, and its 2026 proprietary 'Dausos' protocol drew instant community skepticism about closed-source crypto ('did Surfshark just vibe-code WireGuard with a new encryption algorithm?').

audited3 red flagsfacts reported
outbound link - direct to the provider, no affiliate parameters

site reachable · checked 19 h ago · daily check

Red flags (3):
  • 2025 move of some infrastructure under the Nord Security umbrella means 'independent audits' are bought by the same holding for both brands
  • Community reports (2026-09, r/VPN) of new buffering/throughput degradation on long-term subscriptions while off-VPN is fine
  • Currency optimization + A/B price testing disclosed in own billing policy - you may pay a different renewal price than your neighbor

Review

draft generated by Qwen3, fact-checked by the vpncomparison editorial desk · review version 8 · prose updated 2026-10-26 · facts as of 2026-10-01 · how we verify

Honesty note: we have not run our own tests on Surfshark yet (leak tests, speed, kill switch). Everything on this page is source-based meta-research with dated links. When we test it, results appear here and on the change log.

Overview

Screenshot: Surfshark homepage
Surfshark homepage - live capture 2026-09-29

Surfshark is a commercial VPN service based in the Netherlands, owned by Nord Security since 2022. It offers unlimited devices and streaming access, backed by a 2025 Deloitte audit of its no-logs configuration. However, its pricing is opaque - intro and renewal rates are not verified due to geo-pricing and A/B testing - and it operates within a growing corporate duopoly.

Logging & privacy

Surfshark claims a no-logs policy, supported by a 2025 Deloitte Lietuva ISAE 3000 reasonable assurance audit focused on its no-log configuration, plus a 2025 SecuRing infrastructure penetration test. These are stronger than policy-only claims, but the audit was commissioned by Nord Security, which also owns NordVPN, raising questions about independence. Based in the Netherlands (a 14-Eyes country), Surfshark lacks a warrant canary, and while the Deloitte report adds credibility, it does not cover real-time data handling.

Pricing & the renewal trap

Screenshot: Surfshark pricing page
Surfshark pricing page - live capture 2026-09-29

Surfshark’s pricing is unverified: the operator uses geo-specific pricing and A/B testing, with no published renewal figures. The plan structure offers an intro rate for 27 months, after which renewal pricing applies - but exact amounts are undisclosed.Renewal figures are not verified, so no renewal ratio or 3-year total can be calculated. A 30-day refund window exists, but without transparent renewal costs, long-term budgeting is guesswork. Payment is fiat-only; no anonymous crypto options.

Features & performance

Screenshot: Surfshark apps / download page
Surfshark apps / download page - live capture 2026-09-29

Surfshark supports WireGuard, OpenVPN, IKEv2, and its proprietary Dausos protocol (launched 2026), plus obfuscation via NoBorders mode. It includes a kill switch, split tunneling, multihop, and dedicated IP (paid add-on). It supports P2P and streaming, with 4,500+ servers across 100 countries and apps for all major platforms, including Fire TV and Apple TV. No independent performance tests have been run, but community reports from 2026 note buffering issues during streaming when the VPN is active.

Ownership & track record

Surfshark is 100% owned by Nord Security, forming a duopoly with NordVPN under one holding company since 2022. This consolidation means shared audit spending and overlapping marketing, with Reddit users noting skepticism about both brands sponsoring nearly every review site. A 2021 incident involved Zerodium offering bounties for 0-day exploits in its Windows client. Community voices are mixed: some report loyalty and successful streaming workarounds, while others cite new performance issues and ad fatigue.

Censorship resistance

Surfshark offers NoBorders (camouflage) mode for obfuscating traffic in censored regions and has launched Dausos, a proprietary QUIC-based protocol. However, Dausos is closed-source and unaudited, drawing community skepticism. While obfuscation exists, there is no evidence it reliably works in high-censorship environments like China or Iran. For such use, audited, open-source tools with proven obfuscation (like Shadowsocks or Tor) are better choices.

Verdict

Surfshark delivers unlimited devices and a credible 2025 Deloitte no-logs audit, making it a decent pick for households wanting streaming access. But its opaque, A/B-tested pricing and lack of renewal transparency make it risky for long-term use. It pays affiliate networks heavily - expect to see it everywhere - and operates under the same umbrella as NordVPN, reducing true independence.

++ What holds up

  • ISAE 3000 no-logs audit by Deloitte Lietuva, June 2025 - the actual 490KB report PDF is public (fetched)
  • 4,500+ servers in 100 countries stated on own servers page (fetched 2026-09-27)
  • Unlimited simultaneous devices on one subscription
  • Frequent, aggressive intro pricing

-- What to watch

  • Renewal price escalates to near full monthly price after the first term; Surfshark reserves the right to A/B-test displayed renewal prices (own terms page, fetched 2026-09-27)
  • No longer an independent company: Nord Security holding since 2022
  • Closed-source apps; proprietary Dausos protocol criticized on HN as 'rewriting WireGuard with a new encryption algorithm'
  • Marketing site JS-walls its prices behind IP-based currency games

Pricing reality check

Intro pricesee provider site
Refund window30 days
NotesRenewal price not published (A/B testing + geo pricing disclosed by the operator). The former $15.45 "renewal" was the 1-month plan price from a review site - removed.

See the 3-year total next to the marketing number: true-cost calculator →

How to get Surfshark

Sign up atsurfshark.com
Identity checknone
Paymentfiat
Money-back window30 days
Appswindows, mac, linux, android, ios, router …

Check the renewal price above before any multi-year plan - true-cost calculator.

Is Surfshark legit?

Surfshark is operated by Nord Security. Logging claim: No logs - evidence class: independently audited. Our incident log carries 1 documented incident(s) for this operator - see the record below. Facts reported (not fully verified) as of 2026-10-01 - read the sources below.

Evidence classes and scoring: methodology · user experiences: meta-review.

The money trail - what review sites earn by recommending this

has an affiliate program via in-house · published terms: 'Competitive 40% revenue share on new sales' (starting rate); CPA negotiable ('always open to discussing CPA conditions'); $100 minimum payout threshold

Main platform is Tunes (HasOffers) and Surfshark says it is also listed on Impact Radius, Avant, CJ, Appsflyer and Awin.

If we sign up for this program, every link here becomes rel="nofollow sponsored" and routes through /go/. Until then our links point straight to the provider's website with zero tracking. Ranking logic physically cannot read affiliate fields - here is the proof.

Incident record (1)

  • 2021 Zerodium offers bounties for 0-days in Windows VPN clients Exploit broker Zerodium announced it would pay up to $1M+ for 0-days in NordVPN, ExpressVPN and Surfshark Windows clients - bugs that de-ano

On the website

Captured by our screenshot bot from the live site (or its public archive). A capture is evidence of what the page showed at capture time - not an endorsement.

Screenshot: Surfshark homepage
Surfshark homepage - live capture 2026-09-29
Screenshot: Surfshark pricing page
Surfshark pricing page - live capture 2026-09-29
Screenshot: Surfshark apps / download page
Surfshark apps / download page - live capture 2026-09-29

Before you pay: check the renewal price, the refund window, and whether a cheaper or free path covers your use case - the honest checklist.

Visit Surfshark or compare all VPNs →

Surfshark FAQ

Is Surfshark legit?

Based on our checks as of 2026-10-01: Surfshark scores 4.7/10 in our weighted review. We logged 3 red flags (listed above). Its logging claim is backed by an independent audit. User reports, ownership and the incident record are documented with dated sources in the meta-review below.

What do I actually get with Surfshark?

Unlimited device connections, 4,500+ servers in 100 countries, streaming and P2P support, and apps for all major platforms including Fire TV and Apple TV. No free tier is offered.

What is the renewal price and total cost over three years?

Exact renewal pricing is not published - Surfshark uses A/B and geo-based testing, so your rate may differ. The `derived_pricing` data shows no calculable renewal ratio or three-year total due to missing figures.

What proof is there that Surfshark doesn’t log?

A 2025 Deloitte Lietuva ISAE 3000 audit provides reasonable assurance on its no-log configuration, plus a 2025 SecuRing penetration test. However, the audit was commissioned by its parent company, Nord Security, which also owns NordVPN.

Does Surfshark work in censored countries like China or Iran?

It offers NoBorders obfuscation and the new Dausos protocol, but there’s no verified evidence it works reliably in high-censorship environments. Closed-source protocols like Dausos raise trust concerns.

Can I pay anonymously?

No. Surfshark accepts only fiat payments and does not support cryptocurrency. While signup requires only email (no KYC), your payment method will be traceable.

What happens if Surfshark shuts down?

As part of Nord Security, it’s unlikely to vanish suddenly. However, if it does, your subscription ends and refunds are limited to the 30-day window. No data recovery mechanism is advertised.

What’s an honest free or cheap alternative?

Proton VPN offers a permanent free tier with no logs (audited), based in Switzerland. For paid options, Mullvad (flat €5/month, anonymous accounts) or IVPN (independent, transparent) are more privacy-respecting alternatives.

The meta-review: what the internet says about Surfshark

We do not expect you to trust us. This review is a meta-review: below you see what other review sites claim - with their conflicts of interest labeled - what users report on Reddit and forums, and who actually operates Surfshark. Every claim links to its source so you can verify it yourself.

What other reviewers say (2)

Every source carries a conflict label from our review-site database. "Affiliate-funded" means the site earns money if you buy what it recommends. We include critical voices deliberately.

cloudwards.net positive affiliate-funded

Surfshark Review - Cloudwards

Fetched 2026-09-28: Starter 1-mo $15.45 / 15-mo $3.19 / 2-yr+3mo $1.99 ($53.73); 'renewal fees vary' caveat; CleanWeb, dynamic MultiHop, dedicated IP add-on $3.75/mo, rotating IP; unlimited devices.

source dated n.d. · verified by us 2026-09-28 · HTTP 200 · known site, treat as indicative
restoreprivacy.com mixed defunct

Surfshark VPN Review - RestorePrivacy

Fetched 2026-09-28: independent review of Surfshark - audits (Deloitte no-logs ISAE 3000), Netherlands jurisdiction and the Nord Security merger among the trust considerations.

source dated n.d. · verified by us 2026-09-28 · HTTP 200 · known site, treat as indicative

What users say (5)

Reddit, forums, HN - paraphrased and linked, never quoted out of context. Anecdotes, not proof - but refund complaints and leak reports are the best early-warning system this market has.

Hacker News mixed

Surfshark comments (Algolia)

2026 HN skepticism on Dausos ('did they vibe-code WireGuard?'), Private Relay comparisons.

source dated n.d. · verified by us 2026-09-28 · HTTP 200 · known site, treat as indicative
reddit r/VPN mixed

Comments mentioning surfshark (arctic-shift archive)

2026 voices: 5-year loyalty alongside new buffering complaints and Proton defections over port forwarding.

source dated n.d. · verified by us 2026-09-28 · HTTP 200 · known site, treat as indicative
Hacker News negative

DAUSOS protocol skepticism thread

Fetched 2026-09-28: commenters joke 'Did surfshark just rewrite or vibe code WireGuard with a new encryption algorithm?' and argue a 'clean slate' claim would be an outright lie - wariness about an unaudited in-house crypto replacement.

source dated 2026-06 · verified by us 2026-09-28 · HTTP 200 · known site, treat as indicative
reddit r/youtubepremium positive

Surfshark the only VPN that works for this trick

Comment surfaced via pullpush.io archive (2026-09-28): a YouTube Premium trick reportedly works only with Surfshark, not Proton - Surfshark egress IPs specifically pass where the rival's fail.

source dated 2026-09 · verified by us 2026-09-28 · HTTP 403 · known site, treat as indicative
Hacker News negative

Leaked-IP breach-forum analysis mentions Surfshark

Fetched 2026-09-28: discussion of an analysis of leaked IP addresses from a breach forum where Surfshark and iCloud Private Relay appear among the top ten sources - commenters dispute how much that says about the operators themselves.

source dated 2026-07 · verified by us 2026-09-28 · HTTP 200 · known site, treat as indicative

Who is behind Surfshark?

VPN ownership is often deliberately layered through shell companies. This is what we could verify - with sources. Confidence: confirmed (checked 2026-10-01).

OwnerNord Security (Nordsec / Nord Security group, Tesonet ecosystem)
DetailOwned by nord-security since 2022 (100%)

AI fact summary - everything we know, compressed

Generated by Qwen3 on 2026-10-01 from our fact database plus the linked sources. It summarizes - it does not add facts. Check anything that matters against the linked sources.

Bottom line: Surfshark offers unlimited devices and streaming access with a 2025 Deloitte audit backing its no-logs claim - stronger paper than most. But it’s part of the Nord Security duopoly, uses opaque pricing with steep, undisclosed renewals after a long intro period, and launched a controversial closed-source protocol in 2026.

The logging truth: Claims no logs, backed by a 2025 Deloitte ISAE 3000 reasonable assurance audit on configuration - among the strongest audit types available. Jurisdiction is the Netherlands (9 Eyes), but no evidence of court-ordered logging exists; audits are now bought by the same parent as NordVPN, raising independence concerns.

Pricing reality: Intro pricing lasts up to 27 months with no published renewal rate - operator confirms A/B testing and geo-based pricing, meaning you won’t know your next bill. Review sites report $1.99 intro and $15.45 monthly, but these are unverified and likely outdated; the trap is long-term uncertainty.

What reviewers say vs what users say: Affiliate-heavy reviewers (Cloudwards, RestorePrivacy) highlight low intro cost and features, but downplay renewal risks. Users on Reddit report buffering issues in 2026, skepticism over Dausos, and ad fatigue - while others praise its streaming success and long-term reliability, showing a split between marketing and lived experience.

Who runs it: Owned 100% by Nord Security since 2022, operating as Surfshark B.V. in Amsterdam (Netherlands). This merger means shared corporate oversight with NordVPN, reducing actual market competition and audit independence despite separate branding.

Sources & how this review was built

Every external source used on this page, with the date we fetched it and its evidence class [A]-[D] (A = primary/operator, B = serious press/research, C = community, D = our own measurements). Methodology: how we verify. Sources disappear or change - if a link is dead, tell us via contact.

Evidence classes on this page: [A] A: 6[B] B: 5[C] C: 5[D] D: 0 (D stays empty until our own test phase)

  1. [1][A] operator surfshark.com - ISAE 3000 Independent Reasonable Assurance Report (no-log VPN), 10 June 2025 (no permalink) dated 2025-06-10 · fetched 2026-09-28 · HTTP 200
  2. [2][A] operator surfshark.com - SecuRing penetration test of network infrastructure (report 2025-12-12) (no permalink) dated 2025-12-12 · fetched 2026-09-28 · HTTP 200
  3. [3][A] operator surfshark.com - Billing Practices, Currency Policy & Renewal Prices fetched 2026-09-28 · HTTP 200
  4. [4][A] operator surfshark.com - VPN servers overview fetched 2026-09-28 · HTTP 200
  5. [5][B] news ZDNet (via HN) - Surfshark releases new proprietary VPN protocol (Dausos) dated 2026-04-27 · fetched 2026-09-28 · HTTP 200
  6. [6][B] news Nord Security (company) - Nord Security joins forces with Surfshark dated 2022-02-02 · fetched 2026-09-29
  7. [7][C] community Hacker News - Surfshark comments (Algolia) fetched 2026-09-28 · HTTP 200
  8. [8][C] community reddit r/VPN - Comments mentioning surfshark (arctic-shift archive) fetched 2026-09-28 · HTTP 200
  9. [9][A] operator surfshark.com - Transparency report (no permalink) fetched 2026-09-28 · HTTP 200
  10. [10][B] review cloudwards.net - Surfshark Review - Cloudwards fetched 2026-09-28 · HTTP 200
  11. [11][B] review restoreprivacy.com - Surfshark VPN Review - RestorePrivacy fetched 2026-09-28 · HTTP 200
  12. [12][B] news cloudwards.net - What You Need to Know About the NordVPN and Surfshark Merger in 2026 dated 2026-04-01 · fetched 2026-09-28 · HTTP 200
  13. [13][C] community Hacker News - DAUSOS protocol skepticism thread dated 2026-06 · fetched 2026-09-28 · HTTP 200
  14. [14][C] community reddit r/youtubepremium - Surfshark the only VPN that works for this trick dated 2026-09 · fetched 2026-09-28 · HTTP 403
  15. [15][C] community Hacker News - Leaked-IP breach-forum analysis mentions Surfshark dated 2026-07 · fetched 2026-09-28 · HTTP 200
  16. [16][A] operator surfshark.com - Operator pricing page (price verification 2026-10-01) fetched 2026-10-01 · HTTP 200

Rate Surfshark

Community score: no ratings yet

One rating per user and provider. Smoothed display (statistical prior) prevents single-vote manipulation.

User comments (0)

No comments yet - be the first. Posting runs a short proof-of-work in your browser (anti-spam), no account needed.

Alternatives to Surfshark (same kind)

Comparable providers of the same kind only - a free app is never "an alternative" to a commercial VPN. Ranked by the same deterministic score.

hide.me

A rare genuinely usable free plan (no card, P2P allowed on the 10 GB free tier) plus audited no-logs claims twice over - DefenseCode 2015 and Securitum 2024…

7
audited crypto accepted
intro €2.69/mo (about $3.04/mo)
Malaysia commercial vpn 20 d ago

Mullvad VPN

The most honest VPN on the internet, and in 2026 still the one this industry is measured against: numbered accounts, cash or Monero accepted, open-source…

6.6
court-proven no-logs audit open source crypto accepted
intro €5/mo (about $5.65/mo)
Sweden commercial vpn 11 d ago

IVPN

The anti-affiliate champion candidate holds up: no affiliate program (stated out loud on the homepage), flat honest pricing, quarterly warrant canary, annual…

6.1
audit canary open source crypto accepted
intro $5/mo
Gibraltar commercial vpn 42 d ago