Surfshark

Surfshark is headquartered in Amsterdam, Netherlands, sharing a parent holding company (Cyberspace) with Nord Security since a 2022 merger, though the two brands operate independently. Its standout feature is unusual in this market: unlimited simultaneous device connections, at the lowest headline price of any provider in this comparison. Most competitors cap you at 5–10 devices.

Audits and features

Surfshark’s no-logs policy has been independently audited by Deloitte under the ISAE 3000 standard, most recently reverified in June 2025, covering standard, static, and multiport servers. A separate infrastructure audit by SecuRing found no critical vulnerabilities. Its Nexus network powers Dynamic MultiHop — a double-VPN setup where you can manually choose both the entry and exit country, rather than being locked into fixed pairs — and CleanWeb 2.0 handles ad, tracker, and malware blocking at the app level.

What to watch for

Surfshark has had a couple of self-corrected missteps worth knowing about: a “Fake News Detector” browser extension that mis-flagged legitimate sites and was withdrawn after backlash, and a data-collection practice around malware/antivirus logging that a TechRadar investigation flagged and Surfshark reversed within 48 hours. Neither is disqualifying, but both are the kind of thing we’d rather tell you about than not. It’s also worth noting Surfshark doesn’t appear on Privacy Guides’ stricter, privacy-maximalist recommendation list — that list favors Proton VPN, IVPN, and Mullvad specifically, which says more about that list’s narrow criteria than a flaw in Surfshark’s audits.

The verdict

Recommended, especially for households or anyone covering a lot of devices on one plan. The combination of unlimited connections, a real Deloitte audit, and the lowest price in this comparison is a genuinely strong value case, and the two past missteps were both caught and reversed quickly rather than defended.