Surfshark VPN

A Dutch-registered VPN sold inside a wider security bundle

Surfshark is a cybersecurity company, and its own about page lists the VPN alongside Antivirus, Alert, Search, Alternative ID and Alternative Number. Two more brands sit in its menu under "other products": Incogni, which removes personal data from data brokers, and Saily, an eSIM data service. The VPN is the core of the lineup, but the plans on the pricing page all bundle it with other tools, so a buyer is choosing a security suite with a VPN at its center rather than a standalone tunnel.

Who can buy it: the site runs in English and a long list of other languages, from German, Dutch, Finnish and Turkish to Russian, Ukrainian, Korean, Japanese and both simplified and traditional Chinese. The pricing page shows prices in Swiss francs (CHF), with a note that "pricing may vary depending on the currency you use, VAT, and applied coupons", so the currency follows the buyer rather than being fixed. Apps are offered for Android, iOS, Windows, macOS and Linux, with browser extensions for Chrome, Firefox and Edge, and apps for Fire TV, Apple TV and Android TV. The pricing FAQ adds router setup and manual connections for consoles and smart TVs. Some bundled extras are limited by country: identity theft coverage is "available for US residents, except for New York State", and Incogni's data removal is "available for US, UK, EU, Swiss and Canadian residents only". The site does not name the payment methods it accepts or list any country where the VPN itself cannot be bought.

What Deloitte examined, and who stands behind the company

Surfshark's audit post, "Our no-logs policy was verified again", published June 16, 2025 and updated November 26, 2025, says the independent assurance was carried out by Deloitte, which the post calls "one of the Big Four auditing firms". According to the post, Deloitte conducted interviews and reviewed evidence of adherence to the no-logs policy, assessed standard, static and multiport VPN servers, evaluated server configuration and deployment processes, inspected privacy-related settings and procedures, and confirmed "that the no-logs policy is effectively applied across all relevant servers and infrastructure". The detailed ISAE 3000 report is available to Surfshark users inside their account rather than published openly. An earlier post dated January 25, 2023 describes the first Deloitte engagement, which looked at server configuration, the deployment process, API and SDN infrastructure and employees through interviews, and quotes the report's opinion that IT systems were prepared "in accordance with Surfshark's description of its no-logs policy". The no-logs page sums it up as "Independently and regularly assured by Deloitte in 2023 and 2025". The about page separately says the company's first independent audit, in 2018, was by Cure53; the site does not say that one covered logging.

The provider's own claims sit beside the audit. The homepage says the VPN "doesn't monitor, track, or store what you do online", and the no-logs page says the company runs RAM-only servers and uses ephemeral session keys that "are destroyed when you disconnect". It also says what is kept: an email address, an encrypted password, basic billing information and order history, plus "minimal information (your connection to our VPN servers)" to run the service. The footer links a transparency report, and the site mentions quarterly transparency reports introduced in 2026.

On ownership, the site is specific. The footer names Surfshark B.V., KvK number 81967985, at Kabelweg 57, 1014BA Amsterdam, the Netherlands. The about page says Surfshark is based in the Netherlands with offices in Vilnius and Kaunas in Lithuania, Warsaw and Berlin, names Vytautas Kaziukonis as founder, and says that "In 2022, Surfshark and Nord Security merged under one holding company" while operating independently. The site does not name that holding company or say where it is registered.

Apps, servers and features

The homepage lists 4500+ RAM-only servers in 100+ countries. The pricing page says 4500+ servers in 100 countries, "all upgraded to 10Gbps", while the teams page says "most servers are equipped with 10 Gbps ports". Those are the provider's figures; the site does not break them down by country here. The no-logs page names IKEv2, OpenVPN and WireGuard as its protocols and says WireGuard uses post-quantum encryption, and the about page says the company built its own protocol, Dausos, in 2026.

The features page is long. It lists Dynamic MultiHop, where the user picks entry and exit servers, obfuscated servers, split tunneling (called Bypasser, with a Reverse Bypasser that sends only chosen apps through the tunnel), a kill switch, NoBorders for restricted networks, the CleanWeb ad and tracker blocker, a cookie pop-up blocker for Chrome, Firefox and Edge, static IP servers and a dedicated IP. Further down come Everlink, which the site describes as patented self-healing technology that restores dropped connections, auto-connect, a rotating IP that changes the address "every few minutes", GPS override on Android and a pause button for 5 minutes, 30 minutes or 2 hours. Dedicated IP is a paid add-on "available in 20 locations". The site does not name any streaming service it says the VPN works with, and it says nothing about torrenting or P2P use.

Plans, prices and support

The pricing page offers three plans on 24-month, 12-month and 1-month terms. With the longest term shown, Surfshark Starter is CHF 2.49 a month plus 3 extra months, with a sale price of CHF 67.23 "for the first 27 months" against an old price of CHF 444.15 and a "Save 85%" badge. Surfshark One is CHF 2.79 a month (CHF 75.33 for the first 27 months, old price CHF 511.65) and Surfshark One+ is CHF 4.49 a month (CHF 121.23 for the first 27 months, old price CHF 589.95, "Save 79%"). VAT may apply to all three. The FAQ explains billing: the monthly plan is billed monthly, the 1-year plan every 12 months, and the 2-year plan "once at the beginning of your subscription and then annually after it expires". On renewal the page says only that "you will be charged the applicable renewal price", without stating it.

Every plan allows unlimited simultaneous devices. The 7-day free trial is limited to 3 devices, and the site pairs it with a 30-day money-back guarantee "if you decide to stay after your free trial". Refunds are offered "within 30 days of signing up". For businesses, the teams page quotes Starter from $5.90, One from $6.90 and One+ from $9.40 a month per user on a 1-year plan, with a minimum of 5 users. Support is by 24/7 live chat and email, with a help center and setup guides; the about page says there is no phone number. The footer has links to cancel a contract at the end of its term or immediately, and to request a refund.

What the site leaves open, and who it suits

The biggest gap is price after the introductory term. Every figure on the pricing page covers "the first 27 months", and the renewal rate is not published. Payment methods go unmentioned too, including whether cryptocurrency or any other anonymous option is accepted. The site names Nord Security as the other half of a 2022 merger but not the holding company itself. The full Deloitte reports sit behind a login, so a reader relies on the provider's summary of scope until they have an account, and the site gives no streaming or torrenting claims to judge.

Surfshark suits households that want one subscription across many devices, and buyers who value a named, dated no-logs assurance and a company that prints its registration number in the footer. It also suits anyone who wants ad blocking, multihop and a rotating IP in the same app. It suits less well someone who wants a bare VPN at a bare VPN price, since every plan on the page comes bundled with antivirus and alerts, or someone who needs to know the second-term price before paying.