Compare / Surfshark

Surfshark review

Mainstream VPN, Netherlands · Surfshark B.V. · Last checked November 2026

Affiliate disclosure: some links to the platforms on GetVPN.now may earn us a commission if you sign up or pay. It never costs you more, and no platform pays to be listed or to change what we write. How we rate

Surfshark B.V. is a Dutch company in Amsterdam, and since 2022 part of the same group as NordVPN, though the two say they operate independently. Deloitte checked its no-logs claims twice (published January 2023 and June 2025), and on November 12, 2026 it published a KPMG no-logs assessment under the ISAE 3000 standard; SecuRing pen-tested its network infrastructure in late 2025, and Cure53 reviewed its new Dausos protocol in 2026.

In August and September 2026 a misconfigured internal test server was reached from the internet, exposing service configurations, build credentials, parts of binaries and code history, and a proxy server was also accessed. Surfshark says production VPN servers and customer data weren't affected, and it disclosed the breach quickly. It is the freshest incident of any provider here, which is why our "skip it if" line mentions it.

It supports WireGuard, OpenVPN and IKEv2, with Dausos so far only in the macOS App Store app. There's no free plan, but new customers on 12- or 24-month plans get a 7-day trial, plus a 30-day refund on a first purchase. Head-to-heads: NordVPN vs Surfshark, ExpressVPN vs Surfshark and Surfshark vs CyberGhost.

The facts

Price & refund

As listed on Nov 12, 2026 (US, VAT may apply; promos change): Starter, the cheapest tier, is $2.49/mo on the 24-month plan, $67.23 for the first 27 months; the page's plan data puts 12 months at $2.99/mo ($44.85 for 15 months) and month to month at $18.95. The page says renewals are charged at the applicable renewal price but shows no amount. The 30-day money-back guarantee covers the initial purchase only, one refund per service; recurring payments, prepaid or gift-card payments and most reseller purchases are excluded. New users buying a 12- or 24-month plan on the website get a 7-day free trial on up to 3 devices.^[1][2][3]

Owner & jurisdiction

Surfshark B.V. is a company established in the Netherlands, registered at Kabelweg 57, Amsterdam. In 2022 it merged with Nord Security, NordVPN's parent, under one holding company, and says the two operate independently.^[2][4]

No-logs audits

On Nov 12, 2026 Surfshark published a KPMG no-logs assessment under ISAE 3000, which it says reviewed server configurations, handling of temporary login data, employee access controls, change control and privileged accounts. Before that, Deloitte's second no-logs assurance report (ISAE 3000), published June 2025, covered standard, static and multiport VPN servers. SecuRing pen-tested Surfshark's network infrastructure in late 2025 (published January 2026) and found no critical vulnerabilities; one SSL/TLS configuration issue was fixed. Cure53 reviewed the architecture and cryptography of Surfshark's Dausos protocol in February and March 2026 and found nothing rated critical or high in the protocol itself; the most serious findings were in out-of-scope hosting.^[5][6][7][8]

Breaches & incidents

A misconfigured internal test server was reachable from the internet; Surfshark spotted the activity on August 31, 2026 and contained it on September 2. The attacker accessed parts of system binaries, internal service configurations, some build credentials that had been committed to code history, and a proxy server; Surfshark says no user data or VPN services were affected. It promised an additional independent audit of its broader infrastructure but named no firm or date.^[9][10]

Protocols & free plan

WireGuard (Windows, macOS, iOS, Android), OpenVPN over UDP or TCP (also on Linux) and IKEv2. Surfshark's own Dausos protocol is available only in the macOS App Store version of the app. Only paid plans are sold; the free option is the 7-day trial.^[11][1]

Visit Surfshark · Compare all platforms