Disclosure: VPNFin is reader-supported. If you buy a VPN through links on this page, we may earn a commission at no extra cost to you. This never affects our ratings — here’s our full disclosure.
Is Surfshark safe? The record says yes for most people. Surfshark’s trust centre lists no-logs audits by Deloitte in 2023 and 2025, a SecuRing infrastructure audit in December 2025 that found no critical vulnerabilities, and RAM-only servers across the network. The open question is jurisdiction: Top10VPN and TechNadu both flag the Netherlands’ place in EU and intelligence-sharing networks.
This page sets out the audits, the infrastructure, the ownership and the trade-offs, so you can judge for yourself.
The Audit Record
Wikipedia’s history of Surfshark records a Cure53 audit of its browser extensions in 2018 and a Deloitte no-logs assurance at the end of 2022. Surfshark’s trust centre lists Deloitte no-logs audits in 2023 and 2025, and a SecuRing infrastructure audit completed in December 2025 with no critical vulnerabilities.
TechNadu adds that Cure53 reviewed Surfshark’s newer Dausos protocol and found no critical or high-severity issues within scope. TechNadu also mentions a 2026 Deloitte audit, which Surfshark’s trust centre does not list, so treat that date with caution.
No-Logs Audits Versus Security Audits
Not all audits answer the same question. Deloitte’s no-logs audits check whether Surfshark stores what it says it does not. Cure53 and SecuRing tested security: whether the apps, protocol and servers resist attack. Surfshark also holds a MASA certificate for its Android app, awarded in December 2023 and January 2025.
Our audit table counts the two Deloitte no-logs audits under our method, which looks only at logging. Our VPN audit tracker explains why we separate the two kinds.
RAM-Only Servers
Surfshark says its whole network runs on RAM-only servers, which Wikipedia dates to July 2020. Nothing is written to a hard drive, and each reboot loads a fresh configuration, as Surfshark’s trust centre explains. A seized server holds no stored data.
What Surfshark Does Store
Top10VPN notes Surfshark keeps account information, such as your email and billing details, to run the service. That is why it says Surfshark is not technically a zero-logs VPN, though the stored data is minimal. Our no-logs guide explains the difference between account data and activity logs.
Is Surfshark Safe Under Dutch Jurisdiction?
Surfshark moved its registration to the Netherlands on 1 October 2021, Wikipedia records, and the Netherlands sets no legal obligation for companies to retain user data. Top10VPN and TechNadu still list the jurisdiction as a weakness, since the Netherlands takes part in EU and intelligence-sharing networks.
The practical answer is that a provider that stores no activity logs has little to hand over, wherever it is based. The RAM-only servers and audits are what make that claim checkable.
Ownership
Surfshark merged with Nord Security in 2022, Wikipedia and Top10VPN report, and Top10VPN names the Dutch holding company as Cyberspace. The two brands keep separate infrastructure, a security review summarised by MalwareTips notes. Our VPN ownership guide covers the group. Surfshark belongs to Nord Security, which also owns NordVPN.
Security Features
Surfshark offers WireGuard, OpenVPN, IKEv2 and its own Dausos protocol, its trust centre says, with a kill switch in the apps. Our Surfshark WireGuard guide covers the default protocol, and our kill switch guide explains why the kill switch matters.
Transparency Reports
Surfshark publishes transparency reports, the MalwareTips security summary notes. Reports of this kind usually record requests from authorities and the provider’s response. Reading the latest one is a practical test of whether Surfshark is safe in the way its policy claims.
The Dausos Protocol
Dausos is Surfshark’s in-house protocol, listed on its trust centre. Cure53 found no critical or high-severity issues within scope, TechNadu reports. Vpncentral notes Dausos has limited platform support for now, and Surfshark’s September 2026 update said it was available only on macOS. WireGuard remains the safe default elsewhere.
What Safe Does Not Mean
Is Surfshark safe from every threat? No VPN is: none makes you anonymous while you are signed in to accounts, and none stops malware you install yourself. Our guide to what a VPN hides sets realistic expectations, and our Surfshark China guide shows where even a safe VPN meets its limits.
How Surfshark Compares
Our audit table counts six audits for NordVPN, five for Proton VPN and four for PureVPN, against two for Surfshark under our method. Surfshark’s extra security audits narrow that gap in practice. Our NordVPN safety guide and PureVPN safety guide compare those providers in depth.
What Surfshark Costs
On 25 September 2026, the Starter 2-year plan cost $67.23 for the first 27 months. Renewal sits at about $79 a year, according to Security.org and VPNOverview. Our Surfshark price breakdown covers the plans, and our Surfshark refund guide explains the 30 days.
| Provider | Renewal price | Per month | Tier |
|---|---|---|---|
| NordVPN | $139.08/yr | ~$11.59 | Basic |
| Surfshark | ~$79/yr | ~$6.58 | Starter |
| ExpressVPN | $99.95/yr | ~$8.33 | Basic |
| CyberGhost | $56.94/yr | ~$4.75 | 2-year |
| PureVPN | $47.95/yr | ~$4.00 | Standard, 2-year (1-year renews $57.95) |
| IPVanish | $89.99/yr | ~$7.50 | Essential |
| Windscribe | ~$69/yr | ~$5.75 | Pro |
| Proton VPN | ~$83.88/yr | ~$6.99 | VPN Plus |
| Mullvad | ~$65/yr | ~$5.40 | flat, no tiers |
| Norton VPN | $79.99/yr | ~$6.67 | Standard |
| Hotspot Shield | ~$95.99/yr | ~$8.00 | Premium annual |
| Astrill | $300 every 2 yrs | ~$12.50 | 2-year, same at renewal |
How We Research
This page draws on Surfshark’s trust centre, Wikipedia’s Surfshark history, Top10VPN’s review, TechNadu’s 2026 review, a MalwareTips security summary and our audit table. We cross-checked these sources against each other, and where they conflict or something can’t be verified, we say so in the text rather than guessing. We checked time-sensitive figures, including prices in US dollars, on 6 October 2026. Surfshark’s renewal table did not load, so renewal figures come from Security.org and VPNOverview. The main source we relied on is Wikipedia’s Surfshark history. Our full approach lives on the About Us page.
Is Surfshark Safe? FAQ
For most users, yes: Deloitte no-logs audits, a clean SecuRing audit and RAM-only servers.
Yes. Deloitte checked no-logs in 2023 and 2025; Cure53 and SecuRing tested security.
Account information such as email and billing, Top10VPN notes, but no activity logs.
The Netherlands, since 1 October 2021, per Wikipedia.
It merged with Nord Security in 2022, under a Dutch holding company, Cyberspace.
The Verdict
Is Surfshark safe for everyday privacy? Its audits, RAM-only servers and clean security tests point to yes. Users who worry about EU jurisdiction can weigh that against an audited record that leaves little to hand over. Our Surfshark value guide covers the rest of the decision.