NordVPN vs Surfshark
Same owner: Nord Security. Both brands belong to one company.
Nord Security owns both. Choose NordVPN if you need a verified Linux CLI or custom DNS; choose Surfshark if lower projected costs on a longer subscription matter more to you.
| Criterion | NordVPN | Surfshark |
|---|---|---|
| Score | 6.7 | 6.9 |
| Latest VPN audit | Deloitte, 12 Dec 2025 (gated or summary only) | Cure53, 30 Mar 2026 (gated or summary only) |
| Owner group | Nord Security | Nord Security |
| Cheapest 3-year cost (USD) | $260 | $135 |
| Port forwarding | No | No |
| Open-source apps | Unknown | Unknown |
| RAM-only servers | Yes | Yes |
| Refund window | 30 days | 30 days |
| Servers (provider-reported) | 7121 | 4500 |
Providers change prices often, and we regularly verify prices against their own pricing pages, though small differences from current prices are possible. Prices checked 11 Oct 2026. Three-year costs in US dollars at a fixed exchange rate.
Choose NordVPN if
- You need verified Linux CLI or custom DNS support.
- You value a longer history of independent no-logs assurance engagements.
- You want verified cash or Bitcoin payment options.
Choose Surfshark if
- You prioritize lower projected costs on the longer entry plans.
- A Linux GUI, WireGuard configuration export and split tunnelling cover your needs.
- You want a public infrastructure penetration-test report to inspect.
Our take
NordVPN has a longer history of no-logs assurance engagements, but audit scope matters more than the length of the list. Its Deloitte engagement dated 12 Dec 2025 examined server infrastructure, configurations and deployment across several server types; report access is restricted. Surfshark's Deloitte engagement dated Jun 2025 examined adherence to its no-logs policy, including server configuration, deployment and procedures, with the report available inside customer accounts. Surfshark also has a public SecuRing infrastructure penetration-test report dated 12 Dec 2025. That tests a different question from logging practices. Neither kind of engagement guarantees future behaviour.
Nord Security owns both brands, so switching between them does not diversify your trust across unrelated corporate groups. Their incident histories still deserve separate attention. NordVPN's rented-server incident in 2018 involved an insecure remote-management account left by the data center, with disclosure after 19 months. NordVPN says no other servers were affected. For Surfshark, incidents were none found in our review, which is not proof that none happened. If ownership concentration concerns you, choosing between these brands leaves that concern unresolved. If disclosure practices matter more, weigh NordVPN's delay alongside its subsequent assurance history.
Price is the clearest reason to choose Surfshark for a longer commitment. For the longer entry plans, the table's cost projection totals €232 for NordVPN Basic and €120 for Surfshark Starter. Their respective renewal rates are €11.59 and €5.88 a month. NordVPN's premium makes more sense if you need its verified Linux CLI or custom DNS support. Otherwise, Surfshark covers shared essentials including a kill switch, split tunnelling and a Linux GUI. Choose around the functions you will actually use, then budget for renewal.
FAQ
Are NordVPN and Surfshark owned by the same company?
Yes. Nord Security owns both, although their named service providers are nordvpn S.A. and Surfshark B.V. Choosing between them changes your service provider within the same corporate group.
Is Surfshark always cheaper than NordVPN?
No, the subscription you choose matters. Surfshark has the lower projected total for the longer entry plans, but the monthly entry plans start at €14.99 for NordVPN Basic and €16.45 for Surfshark Starter.
Which has better evidence for its no-logs claims?
NordVPN has a longer history of independent no-logs assurance engagements, while Surfshark also has Deloitte assurance covering its policy and supporting systems. Their latest no-logs reports have restricted access, so neither offers unrestricted inspection of that evidence. A public penetration-test report can help you assess security testing, but it does not establish logging practices.
Should I use either VPN to reach my own server?
Neither supports port forwarding, so neither fits a setup that requires inbound connections through a forwarded VPN port. For private access to your own machines, start with our private-access comparison before buying a commercial VPN subscription.