1 month
Surfshark Starter
$16.45
$16.45 per month
At renewal
1 month / $16.45
$16.45 per month
Same monthly price
← All VPNsOpen audit material ↗ Open audit material ↗ Open audit material ↗ Open audit material ↗
Surfshark
Current Performance
No performance results for this period.
No speed history available.
Pricing & renewal
Compare the full initial charge with the renewal charge. Monthly equivalents spread the charge across the access period; they do not mean you pay monthly. Prices checked on September 12, 2026.
No permanent free VPN plan
No permanent free VPN plan. Direct seven-day trial requires first-time eligibility and payment details on 12/24-month selections; three devices during trial, unlimited VPN connections after payment. Cancel before trial ends to avoid charge. Not activated.
Plans
1 month
Surfshark One
$18.95
$18.95 per month
At renewal
1 month / $18.95
$18.95 per month
Same monthly price
1 month
Surfshark One+
$21.85
$21.85 per month
At renewal
1 month / $21.85
$21.85 per month
Same monthly price
15 months
Surfshark Starter
$50.85
$3.39 per month
At renewal
12 months / $79.00
$6.58 per month
+94.2% vs. initial monthly equivalent
15 months
Surfshark One
$53.85
$3.59 per month
At renewal
12 months / $99.00
$8.25 per month
+129.8% vs. initial monthly equivalent
15 months
Surfshark One+
$112.35
$7.49 per month
At renewal
12 months / $119.00
$9.92 per month
+32.4% vs. initial monthly equivalent
27 months
Surfshark Starter
$67.23
$2.49 per month
At renewal
12 months / $79.00
$6.58 per month
+164.4% vs. initial monthly equivalent
27 months
Surfshark One
$75.33
$2.79 per month
At renewal
12 months / $99.00
$8.25 per month
+195.7% vs. initial monthly equivalent
27 months
Surfshark One+
$121.23
$4.49 per month
At renewal
12 months / $119.00
$9.92 per month
+120.9% vs. initial monthly equivalent
Payment methods
Automatic renewal
- Credit card
Availability may vary by plan, country and purchase channel.
Managing your subscription
Renews automatically
Subscriptions purchased on the VPN website
- Payment methods
- Credit card
For plans other than monthly subscriptions, a renewal notice is sent 30 days before expiry.
Your card may be pre-authorized before the subscription expires.
Subscriptions purchased through the App Store
Subscriptions purchased through Google Play
Your subscription renews for another billing period, and you are charged again unless you turn off automatic renewal. The charge date and amount depend on your subscription terms.
How to cancel your subscription
Subscriptions purchased on the VPN website
- Payment methods
- Credit card
- Sign in to your Surfshark account.
- Open your profile menu and select Subscription.
- Open Payments.
- Select Cancel renewal and confirm.
Your paid access continues until the current paid period ends.
Subscriptions purchased through the App Store
- Manage and cancel your subscription in Apple subscription settings.
Your paid access continues until the current paid period ends.
Subscriptions purchased through Google Play
- Manage and cancel your subscription in Google Play subscription settings.
Your paid access continues until the current paid period ends.
How to remove saved payment details
We could not confirm whether you can remove saved payment details or how to do it.
Refund conditions
What you can request a refund for
Within 30 days
Starting from: Your initial purchase
Subscriptions purchased on the VPN website
- Payment methods
- Credit card
The provider’s refund guarantee applies subject to conditions.
Only the first purchase is eligible.
If you start with the direct seven-day trial, the window begins with the first paid charge.
Conditions
- Only one refund is available per service.
How to request a refund
- Contact Surfshark live chat to request a refund.
We could not confirm how non-refundable extras affect the refund amount for a bundle.
Not covered by these refund terms
Subscriptions purchased on the VPN website
- Payment methods
- Credit card
Exclusions
- Renewal payments are not covered by the provider’s guarantee.
- Prepaid and gift-card purchases are excluded.
- Trials lasting 30 days or longer are excluded.
- Purchases that violate the terms of service are excluded.
- Some extras, including Anonymous Dedicated IP and Alternative ID-related purchases, are excluded.
App Store & Google Play purchases
Within 30 days
Starting from: Your initial purchase
Subscriptions purchased through Google Play
The provider’s refund guarantee applies subject to conditions.
Only the first purchase is eligible.
Renewal payments are not covered by these refund terms.
Conditions
- Only one refund is available per service.
Exclusions
- Prepaid and gift-card purchases are excluded.
- Trials lasting 30 days or longer are excluded.
- Purchases that violate the terms of service are excluded.
- Some extras, including Anonymous Dedicated IP and Alternative ID-related purchases, are excluded.
How to request a refund
- Within 48 hours of purchase, request a refund through Google Play.
- For later requests, contact Surfshark support.
We could not confirm how non-refundable extras affect the refund amount for a bundle.
Subscriptions purchased through App Store
The provider’s refund guarantee does not apply to this purchase.
How to request a refund
- Request a refund through Apple.
Apple’s separate eligibility rules and time limit have not been confirmed here.
Ownership & jurisdiction
Who runs the VPN?
Surfshark B.V. (registered in Netherlands) is the company named as providing the VPN service. Direct consumer VPN contracting entity; separate bundled-service operators not assigned.
Which laws apply?
The terms specify British Virgin Islands law and courts. Mandatory consumer protections in your country of residence still apply.
Audits & findings
Each audit covers particular systems and a particular point in time. A provider announcement is distinct from a publicly available audit report.
Audit search checked September 12, 2026
Public audit material
Deloitte Lietuva UAB
no logs · infrastructure · privacy controls
Audit details
- Completed
- June 10, 2025
- Published
- June 16, 2025
- Date context
- Procedures May 14-June 10, 2025; publication uses provider announcement.
- Reviewed assets
- VPN configurations and supporting operations, including standard/static/MultiHop/multiport servers.
- Findings
- Reasonable assurance: materially consistent with management description as of June 10, 2025.
- Major issues
- none reported
- Remediation
- not applicable
- Limitations
- Point-in-time ISAE 3000, not a general security opinion. Excludes streaming, most web/API, physical/access-right testing. Appendix permits temporary session identifiers/timestamps, deleted within 15 minutes after disconnect. Limited reliance/distribution purpose.
Public audit material
Cure53
infrastructure · source code · security controls · penetration test
Audit details
- Completed
- Unknown
- Published
- Unknown
- Date context
- CW09 February/March 2026 testing; summary dated March 30. Exact last testing day not stated.
- Reviewed assets
- Dausos architecture, cryptography, channels and session handling; 16 person-days.
- Findings
- Ten findings: seven vulnerabilities and three other issues; eight in-scope findings Medium or lower. Two most severe findings concern external hosting outside protocol scope.
- Major issues
- unknown
- Remediation
- partial
- Remediation as of
- March 30, 2026
- Limitations
- Public management summary, not itemized report. Majority remediated and submitted for verification; complete retest outcome and OOS severities not stated. Formal specification, threat model and follow-up recommended.
Public audit material
SecuRing
infrastructure · security controls · penetration test
Audit details
- Completed
- December 10, 2025
- Published
- Unknown
- Date context
- Testing December 1-10, 2025. Cover says December 12, 2025; section 3.1 says January 2, 2026; filename date not treated as publication.
- Reviewed assets
- External resources and internal resources accessible through a supplied VPN; public targets redacted.
- Findings
- One Medium TLS-configuration finding (CVSS 5.3) and one redirect recommendation; no higher-severity finding listed.
- Major issues
- none reported
- Remediation
- unknown
- Limitations
- Full public version read; Excel test cases unavailable. Remediation section gives advice, not proof of a completed fix or retest.
Public audit material
SecuRing
applications · security controls · penetration test
Audit details
- Completed
- April 3, 2025
- Published
- Unknown
- Date context
- Testing February 24-April 3, 2025; attestation dated June 9. Publication day unknown.
- Reviewed assets
- Desktop/mobile apps, browser extensions and web apps, also including Incogni and Ironwall.
- Findings
- Attestation reports no Critical vulnerabilities and additional recommendations.
- Major issues
- unknown
- Remediation
- unknown
- Limitations
- Public confirmation letter only; High-severity status, full findings and remediation not disclosed. Scope is broader than VPN alone.
Apps, protocols & servers
Apps & devices
- Computers & mobile devices
Windows, macOS, Linux, Android, iOS
- TV devices
Android TV, Apple TV, Fire TV
- Browser extensions
Chrome, Firefox, Edge
Connection details
- Simultaneous connections
Unlimited
Surfshark Starter, Surfshark One, Surfshark One+
- VPN protocols
Dausos, IKEv2, OpenVPN, WireGuard
Availability varies by app and platform. These protocols do not describe browser extension connections.
Network
- Plan
- Surfshark Starter, Surfshark One, Surfshark One+
- Servers
- 4500+
- Countries
- 100
- Locations
- Not confirmed
Surfshark Starter, Surfshark One, Surfshark One+: View country list (100)
- Albania
- Algeria
- Andorra
- Argentina
- Armenia
- Australia
- Austria
- Azerbaijan
- Bahamas
- Bangladesh
- Belgium
- Belize
- Bhutan
- Bolivia
- Bosnia & Herzegovina
- Brazil
- Brunei
- Bulgaria
- Cambodia
- Canada
- Chile
- Colombia
- Costa Rica
- Croatia
- Cyprus
- Czechia
- Denmark
- Ecuador
- Egypt
- Estonia
- Finland
- France
- Georgia
- Germany
- Ghana
- Greece
- Greenland
- Hong Kong SAR China
- Hungary
- Iceland
- India
- Indonesia
- Ireland
- Isle of Man
- Israel
- Italy
- Japan
- Kazakhstan
- Laos
- Latvia
- Liechtenstein
- Lithuania
- Luxembourg
- Macao SAR China
- Malaysia
- Malta
- Mexico
- Moldova
- Monaco
- Mongolia
- Montenegro
- Morocco
- Myanmar (Burma)
- Nepal
- Netherlands
- New Zealand
- Nigeria
- North Macedonia
- Norway
- Pakistan
- Panama
- Paraguay
- Peru
- Philippines
- Poland
- Portugal
- Puerto Rico
- Romania
- Saudi Arabia
- Serbia
- Singapore
- Slovakia
- Slovenia
- South Africa
- South Korea
- Spain
- Sri Lanka
- Sweden
- Switzerland
- Taiwan
- Thailand
- Türkiye
- Ukraine
- United Arab Emirates
- United Kingdom
- United States
- Uruguay
- Uzbekistan
- Venezuela
- Vietnam
Censorship resistance
Relevant mainly where VPN services are blocked
If you are in the US, a European country, or elsewhere and VPN services are not blocked on your network, these results need not rule this VPN out of your purchase decision. A failed test under blocking in Russia does not, by itself, mean the VPN is poor quality or will not work where you live. Consider its speed, features and price for your needs.
In our tests in Russia, we could not establish a working VPN connection that allowed data transfer under VPN blocking.
A working connection today may be blocked tomorrow
Blocking changes over time and can differ between networks. A successful test shows that a connection worked in the tested conditions; it does not guarantee that it will work elsewhere or keep working.
Detecting VPN traffic
Filtering equipment can identify patterns in a VPN connection, including how a protocol starts a session. It can then prevent the connection or interrupt data transfer. Traffic obfuscation can make these patterns harder to recognise, but it does not prevent every kind of blocking.
Blocking server IP addresses
A censor can also block known VPN server addresses or entire IP ranges. If all traffic to an address is blocked on your network, disguising the VPN protocol alone will not make that server reachable.
What about your own VPN server?
A privately used server may be less exposed than a public VPN server, and traffic obfuscation may help it avoid detection. But its IP address is still visible to your internet provider and can be blocked. Running your own server gives you more control, not guaranteed access, and requires setup and maintenance.
Sources & check dates
- Plans and prices, published by Surfshark, checked on September 12, 2026.
- Renewal prices and billing currencies, published by Surfshark, checked on September 12, 2026.
- Starter 27-month checkout, published by Surfshark, checked on September 12, 2026.
- One 27-month checkout, published by Surfshark, checked on September 12, 2026.
- One+ 27-month checkout, published by Surfshark, checked on September 12, 2026.
- Terms of Service, published by Surfshark, checked on September 12, 2026.
- Refund policy, published by Surfshark, checked on September 12, 2026.
- Cancel auto-renewal, published by Surfshark, checked on September 12, 2026.
- Manage your subscription, published by Surfshark, checked on September 12, 2026.
- Change payment method, published by Surfshark, checked on September 12, 2026.
- Seven-day VPN trial, published by Surfshark, checked on September 12, 2026.
- Subscription plan options, published by Surfshark, checked on September 12, 2026.
- Server directory, published by Surfshark, checked on September 13, 2026.
- Supported VPN protocols, published by Surfshark, checked on September 12, 2026.
- Dausos availability and setup, published by Surfshark, checked on September 12, 2026.
- About Surfshark and ownership, published by Surfshark, checked on September 12, 2026.
- Trust center and audit links, published by Surfshark, checked on September 12, 2026.
- No-logs assurance 2025, published by Surfshark, checked on September 12, 2026.
- ISAE 3000 reasonable assurance report, published by Deloitte Lietuva UAB, checked on September 12, 2026.
- NOR-29 Dausos management summary, published by Cure53, checked on September 12, 2026.
- Network infrastructure public report v1.1, published by SecuRing, checked on September 12, 2026.
- Security assessment confirmation, published by SecuRing, checked on September 12, 2026.