IPCanary

Surfshark

Surfshark offers the best price-to-audit-coverage ratio here -- 100% RAM-only infrastructure, two Deloitte no-logs engagements, and recent Cure53 and SecuRing work covering both the network and the apps. Its honest drawback is pricing structure rather than security: the advertised rate is an introductory 24-month price and the renewal is dramatically higher, so budget for the real number. Worth knowing too that Surfshark and NordVPN have shared a parent company since 2022, so picking both for 'redundancy' buys you nothing.

Jurisdiction
Netherlands (EU; no VPN data-retention obligation, but a 9 Eyes member state)
Servers
4,500
Countries
100
Independent audit
Deloitte 2025
Audit scope
No-logs policy verification (second Deloitte engagement after 2023); separately Cure53 audited the infrastructure and the new Dausos protocol in 2026, and SecuRing audited the infrastructure and the apps in 2025
RAM-only servers
Yes
Kill switch
Yes
DNS leak protection
Yes
Own DNS resolvers
Yes
IPv6 handling
blocked
Port forwarding
No
Split tunnelling
Yes
Simultaneous devices
Unlimited
Monthly price
$16.45
Annual, per month
$3.39
Two year, per month
$2.49
Money back
30 days
Accepts crypto
Yes
WireGuardOpenVPNIKEv2Dausos (proprietary)

Where it is strong

Households and shared accounts -- device connections are unlimited, so one subscription genuinely covers everyone, and the 2-year rate is among the cheapest from a properly audited provider.

Where it is weak

The renewal cliff is steep: $2.49/month is a 24-month introductory rate, and the standard monthly price is $16.45. Surfshark also merged with Nord Security in 2022, so the 'independent alternative to NordVPN' framing is no longer accurate.

Reported to work with

Netflix USBBC iPlayerDisney+Amazon Prime VideoHulu

Streaming access changes weekly on both sides. Treat this as a snapshot, never a guarantee.

Every field above was taken from Surfshark's own current documentation or an independent audit report, and left blank where neither confirmed it. A blank is not a criticism; it means we could not verify it, and we would rather show you that than fill the gap.

Sources: surfshark.com · cybernews.com

Test whether your VPN is actually hiding you