Surfshark is a VPN service founded in 2018 and based in the Netherlands. It has published independent no-logs audits and an infrastructure audit by SecuRing (released January 2026), and is part of the Nord Security group (operated independently of NordVPN). We have run no hands-on tests, so we publish no speeds, prices or rating — verifiable facts only, as of 23 June 2026.
Privacy posture & audits
Surfshark's audit trail is broader than its 2018 founding date suggests: independent no-logs audits in 2023 and 2025, an infrastructure audit by SecuRing published in January 2026, an earlier Cure53 server-infrastructure assessment, and MASA (Mobile Application Security Assessment) certification for its apps. That combination of no-logs and infrastructure assurance is the signal worth weighing.
As always, an audit is a point-in-time check with a defined scope — the SecuRing infrastructure audit and the no-logs audits examine different things. Read the actual reports linked from Surfshark's blog rather than treating "audited" as a single guarantee, and confirm the latest before relying on it.
Jurisdiction & ownership
Surfshark is based in the Netherlands. The Netherlands is inside the 9 Eyes alliance, which is a more notable consideration than the no-retention jurisdictions some rivals use — weigh that against the audited no-logs posture rather than treating either fact in isolation.
Surfshark is part of the Nord Security group following the February 2022 merger with NordVPN's parent, though the two brands operate independently. If avoiding shared ownership is part of your threat model, NordVPN and Surfshark sharing a group is the relevant fact. We disclose it for the same reason we disclose Kape's brands: ownership belongs in an honest comparison.
What we have not tested
We publish no speed or streaming figures because we have not run those tests. Surfshark is often cited for allowing unlimited simultaneous connections, but device limits and current features should be confirmed on Surfshark's own site, since they change.
Pricing and the money-back window also change frequently and are best read off Surfshark's own pricing page at purchase. We leave those blank here rather than publish a stale figure, and recommend using the money-back window to trial the service on your real workload first.
Pros & cons
Pros
- Independent no-logs audits (2023, 2025) plus a SecuRing infrastructure audit (January 2026) and MASA app certification.
- Broad audit posture relative to its 2018 founding.
- Part of the Nord Security group but operated independently.
Cons
- Based in the Netherlands, which is inside the 9 Eyes alliance — weigh against the audited no-logs posture.
- Shares the Nord Security group with NordVPN — disclosed for transparency.
- We have run no hands-on tests, so we publish no speeds or rating.
Frequently asked questions
Has Surfshark been independently audited?
Yes. Surfshark has published independent no-logs audits (2023 and 2025), an infrastructure audit by SecuRing released in January 2026, an earlier Cure53 server-infrastructure assessment, and holds MASA app-security certification. Read the reports on Surfshark's own blog for each one's scope and date.
Where is Surfshark based?
Surfshark is based in the Netherlands, which is part of the 9 Eyes intelligence-sharing alliance. That is a more notable jurisdictional consideration than the no-retention jurisdictions some rivals use, so weigh it against Surfshark's audited no-logs posture.
Is Surfshark owned by NordVPN?
Not directly — Surfshark and NordVPN both sit within the Nord Security group following a February 2022 merger, and are operated as independent brands. If avoiding common ownership matters to your threat model, that shared-group relationship is the relevant fact.