Surfshark
Show audit detailsHide audit details
Second no-logs assurance engagement (first was 2023). Report published June 16 2025, updated November 26 2025; exact assessment period not disclosed. Examined standard, static, and multiport VPN servers, configuration/deployment processes, and privacy settings. Full ISAE 3000 report is only available to logged-in Surfshark account holders, not publicly downloadable. Separately, SecuRing completed an infrastructure security audit in December 2025, confirming network resilience with no critical vulnerabilities found.
Published July 18, 2026· Updated October 8, 2026· By Juan Martinez
In This Article
Surfshark lets you connect an unlimited number of devices on one subscription, on every plan. A family’s phones, laptops and tablets can all run under one account, with no extra fees and no caps.
Deloitte audited Surfshark’s no-logs policy in 2023 and again in 2025. The full report is available after logging in to a Surfshark account.
The price of the Starter plan, Surfshark’s base plan, depends on the billing term: a 1-year or 2-year term costs far less per month than paying monthly. On renewal the price rises to $79 a year, the same after a 1-year and after a 2-year term. That figure isn’t on the pricing page; it appears only on a separate billing-terms page.
No-Logs Audit
Deloitte audited Surfshark’s no-logs policy twice: first in 2023, then in 2025, with a report published June 16, 2025 (updated November 26, 2025). The auditors examined standard, static and multiport VPN servers, along with configuration, deployment and privacy-related procedures, and concluded that the no-logs policy is consistently applied. The full ISAE 3000 report is available only after logging in to a Surfshark account.
Besides Deloitte, Cure53 and SecuRing have also audited Surfshark’s security. In early 2026 Cure53 audited Dausos, Surfshark’s own protocol, and found no critical or high-severity issues in the protocol itself. The most serious findings concerned external hosting infrastructure, not the protocol or its source code. In December 2025 SecuRing completed a broader infrastructure security audit: the network is resilient and no critical vulnerabilities were found. Surfshark also holds a MASA certificate from Google Play’s App Defense Alliance (awarded December 2023 and January 2025), and Surfshark Antivirus is separately certified by AV-Test.
Pricing
The Starter plan costs $16.45 a month when paid monthly. A 1-year term brings it to $3.39 a month and a 2-year term to $2.49 a month; either term adds 3 bonus months on top. The One and One+ plans include antivirus, data breach alerts and identity-theft protection extras.
On renewal, Starter costs $79 a year (about $6.58 a month), regardless of the term of the first subscription. The pricing page doesn’t show this amount, and its FAQ says only that you’ll be charged “the applicable renewal price”. The figure appears only on a separate billing-terms page.
Security & Protocols
Surfshark supports WireGuard, OpenVPN and IKEv2. It also has its own protocol, Dausos, built for consistent everyday speed; for now it is available only on macOS.
The app includes a kill switch and split tunneling, called Bypasser, which lets you exclude specific apps or sites from the VPN.
Two more features are included on every plan. Dynamic MultiHop routes traffic through two VPN servers and encrypts it twice. Rotating IP changes your IP address every few minutes without dropping the connection.
Servers & Torrenting
Surfshark has 4,500+ servers in 100 countries. Torrenting is allowed on every one of them, so there is no need to pick a special server for it.
Surfshark has no port forwarding feature and doesn’t plan to add one. Support explained that open ports are considered a security risk. If you need port forwarding for torrenting or self-hosting, Surfshark won’t work for you.
Jurisdiction
Surfshark B.V. (KvK 81967985) is registered in Amsterdam, Netherlands (Kabelweg 57, 1014BA). The company says the Netherlands has no mandatory data-retention obligation for VPN providers.
The Netherlands is a member of Nine Eyes, an informal grouping of countries that share intelligence. On its own that’s a weak argument against a service; it’s worth weighing only when two VPNs are otherwise equal.
Pros and Cons
- Unlimited simultaneous connections on every plan
- 100% RAM-only server infrastructure since 2020, which wipes data on every reboot
- Aggressive 2-year intro pricing (as low as $2.49/mo on the Starter plan) plus bonus months
- Kill switch and split tunneling ("Bypasser") included, along with a proprietary Dausos protocol aimed at consistent speed
- Dynamic MultiHop (double VPN) and Rotating IP are included at no extra cost — features some rivals gate behind a higher tier
- Every server supports P2P/torrenting, so there's no need to hunt for a specialty server
- The renewal price ($79/yr, ~$6.58/mo) is one of the cheaper steady-state rates we've found across our reviews
- Independent 2026 speed tests are solid — benchmarks in the 650-950 Mbps range on nearby servers, though performance drops more than some rivals on long-distance routes
- The full Deloitte no-logs report is available only after logging in to a Surfshark account
- The renewal price isn't on the pricing page: it appears only on a separate billing-terms page
- Dausos, the newest protocol, is currently macOS-only
- No port forwarding feature: Surfshark considers open ports a security risk, so torrenting and self-hosting setups that need it aren't supported
- The Netherlands, where the company is registered, is a member of Nine Eyes, a grouping of countries that share intelligence
- Surfshark's affiliate program page quotes "publishers", with fine print saying they are paid partners rather than independent reviewers. Most glowing "best VPN" coverage in this niche shouldn't be considered independent
Our Rating
- No-Logs Audit & Trust7.5/10
2 Deloitte no-logs audits, a SecuRing infrastructure audit and Cure53's review of Dausos. The full Deloitte report is available only after logging in. Jurisdiction is in Nine Eyes
- Security Features8.5/10
RAM-only servers since 2020. Kill switch, Bypasser split tunneling, Dynamic MultiHop and Rotating IP at no extra cost, plus the Dausos protocol
- Speed & Reliability8.0/10
In independent 2026 tests, speed on nearby servers was 650-950 Mbps and lower on long-distance routes
- Price & Value8.5/10
Renewal costs $79 a year (about $6.58 a month) regardless of the first term. Competitive, but listed only on a separate billing-terms page
- Support & Usability8.0/10
The number of devices is unlimited, so the service suits families and shared accounts
No-Logs 30% · Security 20% · Speed 20% · Price 15% · Support 15%