What do reviewers say about Surfshark?

Affiliate disclosure: this post contains a Surfshark referral link. If you use it, both of us get up to 3 free months of Surfshark VPN. It doesn't change the price you pay.

The mainstream UK consumer-review world (Which?, MoneySavingExpert) doesn't yet treat VPNs as a major review category, so reviewer signal on Surfshark comes mostly from two places: independent third-party audit firms (Deloitte and Cure53) and the major tech press (TechRadar, Tom's Guide, Wired, PCMag, CNET). I've been a Surfshark customer since May 2022, having switched from ExpressVPN. Here's a fair summary of what reviewers actually say, and how my four-year lived experience lines up.

What Deloitte and Cure53 say (the two signals that matter most)

VPN trust depends entirely on whether the company keeps the no-logs promise it makes. The strongest publicly-available signals on Surfshark are independent audits from two different firms.

Deloitte no-logs audit, 2023 and re-verified 2025. (opens in new tab) Deloitte applied the ISAE 3000 assurance standard (opens in new tab) to Surfshark's infrastructure, server configurations, and internal processes. The 2023 audit was Surfshark's first; the 2025 reverification confirmed the no-logs policy is still in place under the same standard. ISAE 3000 is the same assurance framework used for SOC-style audits in other industries; it's a rigorous, structured methodology rather than a marketing exercise.

Cure53 infrastructure audit, 2025. (opens in new tab) Cure53 is a Berlin-based security firm with a strong reputation in the open-source and privacy-tools world (they've audited 1Password, Bitwarden, ProtonMail, Mullvad, and others). The 2025 audit covered Surfshark's platform and its new Dausos protocol, reporting a stable and resilient setup.

Two third-party audits from two different firms within twelve months is a stronger signal than most mainstream VPNs carry. Mullvad, ProtonVPN and NordVPN are the other consumer VPNs with comparable audit cadence. ExpressVPN has its own audit history (KPMG and PwC). The mid-tier of consumer VPNs (Hide.me, PIA, CyberGhost, IPVanish) carry thinner audit signals.

The honest caveat: no audit can prove the absence of all logging. What audits can do is verify that the systems and processes a VPN claims to operate are actually in place at the time of the audit. Recurring third-party assurance is the strongest signal currently available; it's not the same as proof of integrity for all time.

What the major tech press says

The mainstream UK and US tech press has reviewed Surfshark consistently since around 2019. The recurring positions across TechRadar (opens in new tab), Tom's Guide (opens in new tab), PCMag (opens in new tab), CNET (opens in new tab) and Wired (opens in new tab):

• Top-5 ranking is the consistent ceiling. Surfshark almost always appears in the major "best VPN of [year]" lists, usually in the top 3 to 5. It's rarely the #1 outright pick (that's typically ExpressVPN or NordVPN in mainstream lists, or Mullvad in more privacy-focused lists), but it's almost never out of the top tier.
• The value pick. Reviewer framing on Surfshark is consistently "the price-to-feature ratio is the best in the major VPN category." That's particularly emphasised at the multi-year-plan introductory price.
• Speed: mid-pack, not the fastest. Reviewer benchmark tests typically place Surfshark at 70 to 90% of unprotected connection speeds on nearby servers, which is competitive but not class-leading. ExpressVPN and Mullvad tend to win raw-speed benchmarks; Surfshark is close enough that the difference doesn't show up in normal use.
• Unlimited devices is the standout feature. Reviewers consistently flag the unlimited-simultaneous-devices policy as a real differentiator. ExpressVPN caps at 8, NordVPN at 10, ProtonVPN at 10 (paid). Surfshark uniquely doesn't impose a cap.
• Streaming compatibility: good, but volatile. Surfshark's UK servers work with BBC iPlayer, ITVX, Channel 4 and the major US streaming services in most reviewer tests, but streaming services actively block known VPN exit IPs, so any given month some servers stop working. This is the universal VPN review caveat, not Surfshark-specific.

Where reviewer coverage caveats Surfshark

The recurring caveats across the major tech press:

• The auto-renewal price. Surfshark advertises discounted introductory rates on 12 and 24-month plans, then auto-renews at a higher standard rate. Reviewers consistently flag this, and the standard advice is to set a calendar reminder before the term ends. This is industry-wide (Surfshark, NordVPN, ExpressVPN, PIA, CyberGhost all do it), but worth knowing.
• The Nord Security merger. Surfshark joined Nord Security in 2022 (opens in new tab), the same parent company as NordVPN. Reviewer takes split here. Some flag it as a positive (financial backing, shared security expertise). Some flag it as a downside for users who specifically wanted two competing VPNs as independent fallbacks. The two products run on separate infrastructure with separate apps and audits, but they share a parent.
• Country list and obfuscation transparency. Some technical reviewers (notably in the r/VPN and Restore Privacy / Privacytools.io world) want more granular disclosure on which servers are virtual versus physical, and more transparency on the Dausos protocol's openness. Surfshark has addressed this partially with the Cure53 audit, but the open-source community generally still prefers Mullvad and IVPN for strict privacy maximalism.

What VPN-comparison sites say

Specialist VPN review sites (Restore Privacy, PrivacyTools, TechSpot, Comparitech) cover Surfshark in more depth than the mainstream tech press. The consistent positioning:

• Recommended for general consumer use. Surfshark is on most of these sites' approved lists, with the audit history doing most of the heavy lifting for trust.
• Not the top pick for privacy maximalists. Users who prioritise full corporate independence, open-source clients, or strict anonymity-from-payment-onwards (Mullvad accepts cash via mail) usually push readers toward Mullvad or IVPN. Surfshark is a tier below those for privacy purists, comfortably above the cheap-VPN mid-tier.
• Strongly recommended for households and travellers. Unlimited devices, broad server coverage, low price relative to capability, and the audit history make Surfshark a frequent first-recommendation for non-technical users.

What my four-year customer experience adds

I switched from ExpressVPN to Surfshark in May 2022 and have stayed since. Four years in, the day-to-day experience matches the reviewer baseline:

• Connection stability has been strong. Connection drops are rare. I run Surfshark on my laptop, phone, iPad and TV apps simultaneously and the experience has been consistent.
• Speed dips are noticeable but small. Streaming and video calls work fine. The dip from unprotected speeds is enough to see in a speed test, not enough to feel in normal use.
• The unlimited-devices policy is the real practical upgrade over ExpressVPN. I no longer think about which household devices are "in" or "out" of the cap.
• The auto-renewal price reset hurts. I set a reminder a few weeks before my term ends and renegotiate or switch to a fresh plan. The intro-rate-then-jump model is annoying but industry standard.

The full first-person account is on the Surfshark referral page and in the audit-and-trust section there.

Where the reviewer position lines up with mine

Agreements:

• The Deloitte and Cure53 audits are the strongest signals currently available on Surfshark's trustworthiness, and I'd weight them the same way reviewers do.
• The price-to-feature ratio is genuinely the best in the major VPN tier.
• Unlimited devices is a real, practical advantage over ExpressVPN and NordVPN.
• The auto-renewal pricing model is a legitimate caveat, not a deal-breaker.

Where I lean more positive than the reviewer baseline:

• Day-to-day connection stability is better than headline reviews suggest. The reviewer benchmark format (run a battery of tests, average the results, publish a chart) doesn't capture the lived experience of "I open the laptop on a hotel Wi-Fi and the VPN just works." That's the dimension I most value, and Surfshark has been excellent at it.

Where I lean roughly neutral:

• The Nord Security merger. I don't personally weight independent corporate ownership as heavily as some privacy-maximalist reviewers do. If you do, that pushes you toward Mullvad or IVPN rather than Surfshark or NordVPN.

Should you trust the reviewer view on Surfshark?

The strongest signals on Surfshark are independently verifiable: Deloitte and Cure53 are real firms applying real methodologies, the audit reports are referenced and dated, and the tech press benchmark data is replicable. Those signals are credible.

What reviewers can't tell you is whether your specific use case matches Surfshark's strengths. If you want the absolute fastest single-tunnel speed and you'll pay for it, ExpressVPN or Mullvad are better fits. If you want full corporate independence, Mullvad or IVPN. If you want broad device coverage, audited privacy, and the strongest value in the major VPN tier, Surfshark is a defensible choice and has been mine for four years.

What reviewers also won't tell you is whether Surfshark's refer-a-friend programme is worth claiming. That part's straightforward: if you're going to sign up to Surfshark anyway, using a referral link adds up to 3 free months of subscription at zero cost to you, payable after the new customer stays subscribed for 31 days.

What do reviewers say about Surfshark FAQs

Is Surfshark independently audited?

Yes, twice, by two different firms, recently. Deloitte audited Surfshark's no-logs policy in 2023 under the ISAE 3000 assurance standard and re-verified it in 2025. Cure53 (a Berlin-based security firm with a strong reputation in the privacy-tools world) audited Surfshark's infrastructure and the new Dausos protocol in 2025. Two third-party audits within 12 months is a stronger signal than most mainstream VPNs carry.

Does Which? review VPNs?

Not in the same depth Which? reviews energy suppliers, mobile networks or credit cards. Which? has occasional VPN coverage but doesn't run the kind of annual customer-satisfaction survey that drives their Recommended Provider ratings. The strongest publicly-available signal on Surfshark's trustworthiness comes from the Deloitte and Cure53 audits rather than Which?.

Where does Surfshark rank in the major tech press?

Consistently in the top 3 to 5 of mainstream "best VPN" lists from TechRadar, Tom's Guide, PCMag, CNET and Wired. It's rarely the outright #1 (typically ExpressVPN, NordVPN or Mullvad in those slots), but it's almost never out of the top tier. The recurring framing is "best value in the major VPN category" rather than "fastest" or "most private."

Is Surfshark slower than ExpressVPN?

In benchmark tests, yes. ExpressVPN and Mullvad typically win raw-speed benchmarks across the consumer VPN field. Surfshark sits at roughly 70 to 90% of unprotected connection speeds on nearby servers, which is competitive but not class-leading. In day-to-day use, streaming, video calls and general browsing feel smooth on Surfshark; the speed gap doesn't show up unless you're explicitly testing for it.

Is Surfshark owned by NordVPN?

Surfshark and NordVPN merged under the Nord Security parent company in 2022. They're not the same product: each runs on separate infrastructure, has its own apps, pricing and audits. They share a parent and some back-office functions. If full corporate independence is important to you, smaller providers like Mullvad and IVPN are alternatives. Surfshark's 2023 and 2025 Deloitte audits both took place after the Nord merger and are unaffected by it.

Should you trust the reviewer view on Surfshark?

The strongest signals (the Deloitte and Cure53 audits) are independently verifiable, the tech press benchmark data is replicable, and the Trustpilot 4.3/5 from a real customer base is a credible volunteered-rating signal. The aggregate reviewer position is fair: Surfshark is a credible, audited consumer VPN with a strong value proposition and class-leading device coverage. Your specific decision still depends on whether speed maximalism, corporate independence, or broad device coverage matters most.

You might also like

• Get a Surfshark referral code: free months for both of you

Sources

• Deloitte no-logs audit report (ISAE 3000, 2025 reverification): https://surfshark.com/wp-content/uploads/2025/06/ISAE_3000-_Report-Surfshark_No_Log_VPN.pdf (opens in new tab)
• Surfshark Trust Center (Cure53 audit and audit history): https://surfshark.com/trust-center (opens in new tab)
• Surfshark Trustpilot: https://uk.trustpilot.com/review/surfshark.com (opens in new tab)
• Nord Security merger announcement: https://surfshark.com/blog/nordsec-merger (opens in new tab)
• Surfshark Refer & Earn programme: https://surfshark.com/surfshark-referral (opens in new tab)