Surfshark: does it fit you?
Surfshark is a comprehensive internet security service that provides encryption to protect your data across unlimited devices globally.
Best suited to someone who is streaming abroad — for them it scores 62 out of 100, a workable fit, with compromises. If you are budget-conscious instead, the very same product scores 45, a poor fit — look at alternatives.
Same product, different person, different answer. That gap is the reason this site exists — and every number below can be checked line by line.
How it fits, situation by situation
Streaming abroad
62/100
a workable fit, with compromises · we barely know anything here
Privacy-focused
60/100
a workable fit, with compromises · we know a lot here
Frequent travel
58/100
a workable fit, with compromises · we barely know anything here
Beginner-friendly
56/100
a workable fit, with compromises · we barely know anything here
Public wifi safety
—
not researched for this situation yet
Budget-conscious
45/100
a poor fit — look at alternatives · we know a lot here
Where the 62 comes from
No rounding, no editorial nudge. Each fact has a weighting — how much it moves the score — multiplied by how good its evidence is. The maker's own claim counts 70%; something a laboratory measured counts 100%.
| The fact, and the words it came from | Evidence | Sum | Effect |
|---|---|---|---|
| Every product starts here — neither good nor bad | 50 | ||
| top_end_speeds_measured Another reviewer measured raw speeds on a very fast home connection (1000 megabits per second — roughly a top-tier fibre line). On nearby connection points the service still delivered most of that speed, and it dropped further the farther away the connection point was. We ran all tests on a 1000 Mbps connection using the latest Surfshark VPN apps with the WireGuard protocol. | independently measured counts 100% | +12 × 1.00 | +12.0 |
| Fit for “Streaming abroad” | 50 + 12.0 = 62 | ||
Who should buy it, who should not
Good for
Large families needing unlimited connections, frequent international travelers requiring massive server coverage, or those who desire maximum digital protection including ID theft monitoring.
Not for
Users with highly specialized enterprise network needs or specific regulatory requirements not covered by general consumer security tools.
Price
2.49 USD at the last check (20 Jul 2026). The lowest we have recorded is 2.49 USD, watching since 19 Jul 2026.
The facts behind the scores
12 verified facts, each re-confirmed against its source, taken from 7 sources (3 × lab, 2 × official, 2 × press). 7 of them count against the product. Facts we're still checking are not shown here or counted in any score.
| What we found | Who it matters to | Evidence |
|---|---|---|
The most attractive entry-level plan costs only $2.49 per month, providing significant savings compared to the original price, though local taxes may apply.Surfshark Starter $2.49 /mo. + 3 EXTRA months old price $444.15 sale price $67.23 for the first 27 months (VAT may apply). | Budget-conscious individuals and families looking for an entry point into VPN security. | the maker's own claim |
An independent German security firm, Cure53, tore apart Surfshark's own connection technology (called Dausos) in February and March 2026 and found nothing rated critical or high risk inside it. They looked at the source code, not just the outside. Ten issues total were written up, seven of them counted as real security holes, but all the ones inside the protocol were medium risk or lower.With no findings rated at Critical or High severity within the actual Dausos protocol itself, the audit results reflect a stable and resilient platform. | Anyone who wants an outside expert, not the company, to have actually read the code behind the product. | independently measured |
The nastiest problems Cure53 actually found were not in Surfshark's own software at all. They were in the outside hosting setup, meaning the rented servers and infrastructure Surfshark runs on. Because the job was defined as reviewing the protocol, those worst findings were marked out of scope and were not graded as part of the result. So the clean headline result covers a narrower area than it first appears.It is important to highlight that the most severe vulnerabilities identified during the audit were localized to the external hosting environment rather than the Surfshark VPN Dausos protocol or its source code. Consequently, these were categorized as out-of-scope (OOS) for the core protocol assessment. | Anyone reading a 'passed the audit' headline and assuming it covers the whole service rather than one slice of it. | counts against it |
Deloitte, one of the four biggest accounting and audit firms in the world, checked whether Surfshark's servers and systems were actually set up the way its no-logs promise describes. No-logs means the company claims it does not keep records of what you do online. Deloitte gave its strongest grade of confidence, called reasonable assurance, and said the setup matched the description as of 10 June 2025.Based on the procedures performed and the evidence obtained, in our opinion, the configuration of IT systems and management of the supporting IT operations is properly prepared, in all material respects in accordance with the Surfshark’s description set out in the Appendix I, as of 10 June 2025. | Anyone choosing a VPN mainly on the strength of its privacy promise rather than its speed or price. | independently measured |
Deloitte spells out that this was a single snapshot in time, not ongoing monitoring. It says nothing about whether the no-logs setup held true before that day or has held true since, and the auditors note that any later change to the systems could change their conclusion.Our assurance engagement is a point in time assessment. The procedures we performed do not provide any assurance for any other point in time or period of time. | Anyone treating a no-logs audit as a permanent guarantee rather than a photograph of one day. | counts against it |
Surfshark's own signed statement inside the Deloitte report admits the servers do record something: an account identifier plus the times you connected and disconnected. It is wiped automatically within fifteen minutes of your session ending. That is not a record of the websites you visited, but it is not literally zero data either, so the flat claim that the company stores nothing at all is not accurate.Our servers do store information about user’s connection to a particular VPN server (user ID and connection time stamps), but this information is automatically deleted within 15 minutes after termination of user session. | Anyone whose risk is time-correlation, meaning someone matching the moment you connected against the moment something happened elsewhere. | counts against it |
A Polish security company, SecuRing, ran simulated attacks on Surfshark's network infrastructure in December 2025. It found no critical problems, but it did flag one medium-risk issue: weak settings in the encryption that protects traffic between your device and the servers, which under the right conditions could let an eavesdropper intercept that communication or knock the service offline. The fix listed was to switch off outdated encryption methods and old protocol versions.A number of weaknesses in SSL/TLS configuration were identified, which in the presence of favorable conditions can lead to the interception of communication between the client and the server or to performing a Denial of Service attack. | Anyone on untrusted networks such as public wifi, where an attacker sitting on the same connection is the realistic threat. | counts against it |
The cheap headline price only applies to the first term. After that the subscription renews at a much higher standard rate, billed as a yearly lump sum. The entry plan renews at 79 dollars a year, the middle bundle at 99 dollars, and the top bundle at 119 dollars. Against an advertised introductory rate near 2 dollars a month, the entry plan roughly triples on renewal.After the initial subscription period, Surfshark Starter renews at $79 per year ($6.58 per month). Surfshark One renews at $99 per year ($8.25 per month) and Surfshark One+ renews at $119 per year ($9.92 per month). | Anyone comparing VPNs on the advertised monthly price, which is the number that almost never turns out to be what you pay long term. | counts against it |
Another reviewer measured raw speeds on a very fast home connection (1000 megabits per second — roughly a top-tier fibre line). On nearby connection points the service still delivered most of that speed, and it dropped further the farther away the connection point was.We ran all tests on a 1000 Mbps connection using the latest Surfshark VPN apps with the WireGuard protocol. | People on fast fibre connections who want to know how much speed survives | independently measured |
This is the core trap. The 30-day money-back promise covers only your very first payment. Once the subscription has rolled over into a renewal, that renewal charge cannot be refunded at all — so the expensive payment is precisely the one the guarantee does not protect.The subscription has already renewed | Anyone relying on the money-back guarantee as a safety net against an unwanted automatic renewal — it is not one. | counts against it |
Where you buy matters. The refund only applies if you bought directly from Surfshark or through one of three named payment handlers. Buy through any other shop or reseller and the money-back guarantee does not apply to you.The subscription was purchased directly from Surfshark or through an eligible reseller (Paddle, Google Play, or Cleverbridge) | Bargain hunters buying discounted codes from third-party marketplaces, who lose refund rights entirely. | counts against it |
On the positive side, there is no per-person or per-device charge. One subscription covers as many devices as you want at the same time, so a household or small team does not pay extra per user.Surfshark allowed us to connect to as many devices as we wanted, with no limit on simultaneous connections. | Households and small teams, for whom the absence of per-seat pricing materially offsets the renewal price rise. | independently measured |
A score measures fit for a situation, not quality in the abstract. The same product can score 99 for one person and 43 for another without either number being wrong.