VSVPNScorecard
← All VPNs

Surfshark

Budget-friendly, unlimited devices, RAM-only, now part of Nord Security.

surfshark.com
76/100Overall score
Jurisdiction
Netherlands (nine eyes)
Founded
2018
Owner
Surfshark B.V.
Best price
$1.99/mo
Devices
unlimited
Free tier
No
Privacy65
Security100
Transparency63
Ethics100

Best for

  • · Households (unlimited devices)
  • · Budget buyers
  • · Streaming and travel

Not ideal for

  • · Open-source advocates (closed apps)
  • · Anonymous signup
  • · Avoiding 9-Eyes jurisdictions

Strengths

  • Unlimited simultaneous connections
  • Cheap multi-year pricing (~$2/mo)
  • RAM-only servers; Deloitte no-logs audit
  • Obfuscation and multi-hop included

Weaknesses

  • Netherlands sits within the 9 Eyes alliance
  • Apps are not open source
  • Email required; no cash payment
  • Now under the same parent as NordVPN (less brand diversity)

Protocols & encryption

The tunnelling protocols this service offers and the cryptography behind them.

WireGuard

Modern

A modern, lean protocol (~4,000 lines of code) that is fast and easy to audit. Its cryptography is fixed and state-of-the-art, with no weak options to misconfigure.

Data cipher
ChaCha20-Poly1305
Key exchange
Curve25519 (ECDH)
Integrity
BLAKE2s

OpenVPN

Trusted

The mature, widely-trusted open-source standard. Flexible and heavily audited over two decades, though slower than WireGuard.

Data cipher
AES-256-GCM
Key exchange
RSA-4096 / ECDH
Integrity
SHA-256 / SHA-512 HMAC

IKEv2 / IPsec

Trusted

A fast, stable protocol that reconnects quickly when you change networks, so it is popular on mobile. Built natively into most operating systems.

Data cipher
AES-256-GCM
Key exchange
Diffie-Hellman (ECP)
Integrity
SHA-256 / SHA-384
This provider's setup
Stated data cipher
ChaCha20 / AES-256
Stated handshake
Curve25519
Perfect forward secrecy
Yes
Post-quantum resistant
Yes
RAM-only servers
Yes
Kill switch
Yes
First-party DNS (leak protection)
Yes
IPv6
Unknown

Post-quantum: WireGuard hardened with NIST-selected Kyber/ML-KEM (hybridized with Curve25519 + pre-shared key), enabled by default; proprietary Dausos protocol (macOS) also uses post-quantum crypto with AEGIS-256X2.

Full data sheet

Every attribute we track, coloured by whether it helps or hurts your privacy.

Company & jurisdiction
Based inNetherlands
Eyes alliance9 Eyes
Enemy of the InternetNo
OwnerSurfshark B.V.
ConglomerateNord Security
Founded2018
Logging
Traffic / activityNone kept
DNS requestsNone kept
TimestampsNone kept
BandwidthNone kept
Source IP addressNone kept

No-logs policy audited by Deloitte (ISAE 3000) in 2025; the entire fleet is RAM-only.

Payment & anonymity
Anonymous signupNo
Accepts cashNo
Accepts cryptoYes
PGP keyUnknown
Protocols & features
OpenVPNYes
WireGuardYes
Proprietary protocoln/a
Multi-hopYes
ObfuscationYes
Kill switchYes
First-party DNSYes
RAM-only serversYes
Port forwardingUnknown
P2P / torrentingUnknown
IPv6Unknown
Encryption
Data cipherChaCha20 / AES-256
HandshakeCurve25519
Transparency
Open-source clientsNo
Independent audits2
Transparency reportYes
Court / seizure-testedUnknown
Infrastructure
Simultaneous devicesUnlimited
Countries100
Serversn/a
Linux supportGUI app
Pricing
Month-to-month$15.45
Best $/mo$1.99
On plan2-year (Starter)
Free trialn/a
Refund window30 days
Free tierNo
Ethics
Logging policyConsistent
Marketing honestyNo overclaiming

Independent audits

  • Deloitte· 2025 · no-logs (ISAE 3000)
  • Cure53· 2021 · apps + infrastructure

Merged under Nord Security's parent company in Feb 2022 but runs separate infrastructure and audit cycles.

Sources

Last verified 2026-06-17. Point-in-time data, so always confirm on the provider's own site.

Summarise this site with AI