Surfshark Review Australia 2026
Sourced personal VPN — unlimited devices, prepaid intros, A/B One price
Surfshark is for sale to Australians in AUD with advertised local city exits, documented unlimited VPN device connections, WireGuard/OpenVPN on the main apps, and a 30-day money-back window on an initial website purchase. The honest Starter price is the billed total: A$94.23 for 27 months, or A$23.19 every month if you actually want month-to-month. Listed amounts are before tax. The 10 June 2025 Deloitte no-logs report was opened; it is a dated configuration opinion, not zero retained account data. One’s 24-month billed total conflicted across two Chrome sessions. Advertised Australian servers are not data residency. No independent speed, leak or streaming tests were run.
- Best for
- Australian personal-VPN buyers who can read prepaid billed totals, want documented unlimited-device apps, and accept a no-logs claim plus a point-in-time Deloitte configuration report rather than a lab test.
- Not ideal for
- Anyone budgeting the A$3.49 teaser as a cancellable monthly price, buyers who need a single stable One intro price, organisations that need private-resource access, users who need a free plan or confirmed Australian data residency, or buyers picking One+ for Incogni from Australia.
SoftwareHQ does not currently have an affiliate arrangement with Surfshark. The review is independent of commercial relationships. Affiliate disclosure
Overview
Surfshark is a personal VPN. Ownership, logging claims and advertised exit locations are recorded separately. An Australian exit IP is not proof of Australian data residency.
Feature highlights
These highlights come from vendor documentation and editorial analysis of public sources. They are not firsthand test results or a claim that every listed capability was exercised in a trial.
- AUD prepaid 24-month intro is not A$3.49/month cancellable
On 11 Sep 2026 the AU 24-month Starter card billed A$94.23 for 27 months and showed A$3.49/mo as the equivalent. The 1-month Starter card was A$23.19 billed every month. Listed amounts are before tax; VAT may apply. Do not budget the teaser as a cancellable monthly price.
- Unlimited simultaneous VPN devices
Official help: Starter, One and One+ allow an unlimited number of devices under one subscription. A 7-day trial is capped at three devices. Antivirus is a five-device cap. Fair-usage terms can still limit resale-scale use. Not a measured throughput claim.
- Advertised Australian city exits
The Australia servers page names Sydney, Brisbane, Adelaide, Melbourne and Perth (40 advertised AU servers / 5 locations). That is an advertised exit map, not physical-versus-virtual proof and not Australian account data residency.
- WireGuard on listed mobile and desktop apps
Vendor help documents WireGuard (with a post-quantum layer in-app) and OpenVPN on Windows, macOS, iOS and Android. Linux is documented for OpenVPN; WireGuard is not listed for Linux. Dausos is a macOS App Store beta. This is not an independent speed test.
- Kill switch — documented, not lab-tested
Vendor help describes a Kill Switch toggle on Windows, macOS, iOS, Android and Linux. Bypasser (split tunnelling) is documented on Windows, macOS, Android, iOS (websites only) and the browser extension, not Linux. We did not run leak tests.
- No-logs claim with an inspectable Deloitte PDF
The 10 June 2025 Deloitte Lietuva ISAE 3000 report was opened from a public PDF. It is a point-in-time configuration opinion with printed out-of-scope items. Account, payment and 15-minute session data are still described as processed. A SecuRing public infrastructure report (Dec 2025) printed a medium TLS finding.
Ownership and jurisdiction
Legal entity and jurisdiction are not the exit-server map.
- Legal entity
- Surfshark B.V.
- Jurisdiction
- Netherlands
- Parent company
- Holding company with Nord Security after the 2022 merger; Surfshark says the brands operate independently
- Five Eyes
- No
Privacy policy 27 Aug 2026 and about-us / help: controller is Surfshark B.V., Kabelweg 57, 1014BA Amsterdam, KvK 81967985, VAT NL862287339B01. Terms last updated 13 Jul 2026: the contract is with Surfshark B.V. but is governed by the laws of the British Virgin Islands. About-us FAQ: founder Vytautas Kaziukonis; 2022 merger with Nord Security under one holding company while operating independently. The Netherlands is not a Five Eyes member; it is commonly described as a Nine Eyes participant. Jurisdiction is the legal entity, not the exit-server map.
- https://surfshark.com/privacy · checked 2026-09-11
- https://surfshark.com/about-us · checked 2026-09-11
- https://support.surfshark.com/hc/en-us/articles/360003088553-Where-is-Surfshark-located · checked 2026-09-11
- https://surfshark.com/terms-of-service · checked 2026-09-11
Logging and retained data
A vendor no-logs claim is not proof of zero retained account or payment data.
- Logging policy
- Vendor no-logs claim
- Retained service data
- Documented retained service data
Privacy policy 27 Aug 2026: Surfshark does not collect visited IP addresses, browsing history, session information, connection timestamps, used bandwidth, network traffic or similar online-activity data. Help 360003068834 repeats that claim and describes temporary session identifiers.
- account email and encrypted password
- subscription, payment and billing identifiers (including payer country/state and partial card details)
- VPN session user ID and/or IP and connection timestamps, deleted within 15 minutes after the session ends
- dedicated IP linked to account email unless the anonymous Dedicated IP option is selected
- optional diagnostics, crash reports and advertising identifiers when consented
- group-company operational sharing (privacy policy lists EEA, United States and United Kingdom)
A no-logs claim is not proof of zero retained data. Deloitte’s 10 June 2025 Appendix I also lists email, encrypted password, basic billing and order history as processed, RAM-disk VPN servers, and 15-minute session identifiers. Dedicated IP, Alternative ID, Alert, Antivirus and payment partners collect extra identifiers when those products are used.
Help and the privacy policy agree that connection identifiers are kept only to run the VPN and are deleted within 15 minutes. Account data is kept while the subscription is active and for two years after last login, with longer periods for support, tax and legal claims. Payment partners (Stripe, Adyen, Checkout, Coingate and similar) collect their own checkout data.
- https://surfshark.com/privacy · checked 2026-09-11
- https://support.surfshark.com/hc/en-us/articles/360003068834-Do-you-keep-any-logs-of-my-internet-activities · checked 2026-09-11
- https://surfshark.com/wp-content/uploads/2025/06/ISAE_3000-_Report-Surfshark_No_Log_VPN.pdf · checked 2026-09-11
Locations and hosting
Advertised exit countries, physical-versus-virtual evidence, control-plane hosting and account data residency are separate. An Australian exit IP is not Australian data residency.
- Advertised exits
- AU
- Australian exit
- Advertised — not proof of Australian data residency
- Exit location evidence
- Advertised
- Physical vs virtual
- Unknown
- Control-plane hosting
- Unknown
- Account data residency
- Unknown
- Legacy data_hosting field
- Unknown
surfshark.com/servers/australia (11 Sep 2026) advertises 40 Australian VPN servers in five cities: Sydney, Brisbane, Adelaide, Melbourne and Perth, plus 4,500+ servers in 100 countries. Help 360023512493 describes virtual locations as partitioned space that can physically sit in another country; the Australia page does not classify those five cities as physical or virtual. An Australian exit IP is not proof of Australian data residency or of account/control-plane hosting. RAM-only servers are a vendor infrastructure claim, not a hosting-region proof.
- https://surfshark.com/servers/australia · checked 2026-09-11
- https://support.surfshark.com/hc/en-us/articles/360023512493-What-are-virtual-locations · checked 2026-09-11
Per-platform features
Protocol, kill switch and split tunnel are recorded per platform. Missing documentation stays unknown or not tested.
| Platform | Protocols | Kill switch | Split tunnel |
|---|---|---|---|
| Windows | WireGuard, OpenVPN | Yes | Yes |
| macOS | WireGuard, OpenVPN, Other | Yes | Yes |
| iOS | WireGuard, OpenVPN | Yes | Yes |
| Android | WireGuard, OpenVPN | Yes | Yes |
| Linux | OpenVPN | Yes | No |
Windows: Help 360010324739: WireGuard and OpenVPN are documented on the Windows app. Kill Switch how-to has Windows toggle steps. Bypasser how-to covers Windows apps and websites (Bypass VPN / Route via VPN). Dausos is not documented on Windows. Not leak-tested.
macOS: WireGuard and OpenVPN documented on macOS. Dausos (stored as other) is documented only on the macOS App Store build, as a beta. Kill Switch how-to has macOS toggle steps. Bypasser how-to covers macOS; Big Sur is documented as incompatible. IKEv2 exists as a separate manual-profile article, not stored as in-app.
iOS: WireGuard and OpenVPN documented on iOS. Kill Switch how-to has an iOS toggle. Bypasser on iOS is website bypassing only, not per-app. IKEv2 is a manual-profile article, not stored as in-app.
Android: WireGuard and OpenVPN documented on Android. Kill Switch how-to has an Android toggle. Bypasser how-to covers Android 6.0+ apps and websites. IKEv2 is not stored as in-app.
Linux: Current Linux GUI (help 5067279648146) documents a protocol picker and Kill Switch, but does not name WireGuard. Protocol article lists OpenVPN on Linux and lists WireGuard for Windows/iOS/Android/macOS only. Legacy Linux CLI is documented as OpenVPN UDP/TCP. Features article lists Bypasser on iOS, Android, Windows, macOS and the browser extension — not Linux.
Device limits and free tier
- Devices
- Unlimited
- Concurrent connections
- Unlimited
- Free tier
- No free tier
- Free-tier data cap
- Unknown
No free plan on surfshark.com. Help 360026123554: a 7-day website trial exists for new users on 12- and 24-month plans paid with PayPal, Apple Pay or a credit card, capped at 3 devices during the trial. 30-day money-back on an initial paid website subscription is not a free tier. Fair-usage terms can limit an immoderate number of simultaneous connections; Antivirus is a five-device cap.
Audit register
Deloitte Lietuva UAB
Independent reasonable assurance under ISAE 3000 (Revised) on Surfshark B.V.’s configuration of IT systems and supporting IT operations against Surfshark’s no-logs description in Appendix I, as of 10 June 2025. Procedures 14 May 2025 to 10 June 2025. Inspected server types named: standard VPN, static IP, Multihop and Multiport. Out of scope as printed: data-transfer security, streaming/captcha infrastructure, web/API except VPN-infra parts, internal control environment, physical security, and access-rights testing. Point-in-time only. Signed Vilnius, 10 June 2025, Simonas Rimasauskas.
- Report date
- 2025-06-10
- Availability
- Full report published
- Inspection
- Independently inspected
The 7-page PDF was downloaded over HTTPS on 11 Sep 2026 and inspected. Trust Center still links the same engagement as Surfshark-account-only. The report restricts use/distribution to Surfshark and their customers. A no-logs configuration opinion is not proof of zero retained account, payment or 15-minute session data, which Appendix I still describes. This is not a numeric security score.
SecuRing
Public-version grey-box penetration test of network infrastructure, 1–10 December 2025. Cover lists report date 12 December 2025; section 3.1 prints report date 2 January 2026, document version 1.1, authors Adam Hołod and Jakub Korepta. No critical-risk findings. One medium finding: improper SSL/TLS configuration (SCRNG-3533-F1). Target URLs redacted in the public PDF.
- Report date
- 2025-12-12
- Availability
- Full report published
- Inspection
- Independently inspected
Public PDF opened on 11 Sep 2026. Vendor blog copy that there were no high-risk issues is not a substitute for the medium TLS finding printed in the report. This is infrastructure testing, not a no-logs assurance, and not a numeric security score.
Cure53
Management summary dated 30 March 2026: white-box penetration test and source-code audit of the Dausos protocol architecture and cryptography. Investigation CW09 February–March 2026, 16 person-days. Ten findings; no Critical or High inside the Dausos protocol itself. Highest-severity issues were in the external hosting environment and marked out of scope. Dausos is documented as macOS App Store only.
- Report date
- 2026-03-30
- Availability
- Full report published
- Inspection
- Independently inspected
The public file is a two-page management summary, not a full technical annex of the ten findings. Inspected 11 Sep 2026. Not a no-logs audit and not a numeric security score. Dausos is not documented on Windows, iOS, Android or Linux.
When this was checked
Status as of (page snapshot) against a 90-day review target. Checked dates are not updated when the site is rebuilt.
Editorial article date: . That is not proof that pricing, hosting, or compliance was re-checked.
- PricingVerified
Verified — checked 11 September 2026.
AU locale AUD. 24-month Starter billed A$94.23/27 months, One A$105.03 (A/B A$113.13 in a second session), One+ A$169.83; 12-month Starter A$71.85/15 months; 1-month Starter A$23.19. VAT exclusive / VAT may apply. Checkout not started.
- HostingUnknown
Unknown — checked date 11 September 2026 is not field-level evidence on its own.
Advertised AU city exits only. Account/control-plane hosting and data residency were not named as Australia. Unknown is not AU.
Subscription pricing
Prices below are in Australian dollars. ex GST. An effective monthly equivalent is not a cancellable monthly price. Verified — checked 11 September 2026. Source: surfshark.com/pricing.
Default AU 24-month grid 11 Sep 2026: A$3.49/mo teaser is not cancellable monthly. Struck A$626.13, billed A$94.23 for the first 27 months (24 + 3 extra). Hand check 9423/27=349. Cards print VAT may apply. AU payment API vatPercentage 10, totalPriceVat A$103.65 (checkout not started). Renews at A$110.12/year before tax (renewal page + API recurringTotalPrice). VPN + Alternative ID on the plan-options help article; unlimited simultaneous VPN devices. Antivirus is a five-device cap on One/One+ and is not this SKU.
- Introductory billed total
- $94.23 AUD
- Term
- 24 months
- Bonus months
- 3 bonus months
- Effective monthly equivalent
- $3.49 AUD effective monthly equivalent — not a cancellable monthly price
- Renewal
- $110.12 AUD / 12 months
- Month-to-month option
- $23.19 AUD
Checked 2026-09-11
Vendor “Most popular” 24-month card. First headed session and AU payment API billed A$105.03 for 27 months (A$3.89/mo equivalent), renews A$138.00/year before tax. Hand check 10503/27=389. A second headed Chrome profile on the same day printed A$4.19/mo and billed A$113.13 for 27 months (11313/27=419). Terms disclose A/B price testing. Dual public One intros stay unresolved for checkout. Adds Antivirus, Alert and Search per the plan-options help article. Checkout was not started.
- Introductory billed total
- $105.03 AUD
- Term
- 24 months
- Bonus months
- 3 bonus months
- Effective monthly equivalent
- $3.89 AUD effective monthly equivalent — not a cancellable monthly price
- Renewal
- $138.00 AUD / 12 months
- Month-to-month option
- $26.69 AUD
Checked 2026-09-11
Billed A$169.83 for 27 months (A$6.29/mo equivalent), renews A$165.88/year before tax. Hand check 16983/27=629. VAT may apply; API totalPriceVat A$186.81. Pricing page: Incogni is available for US, UK, EU, Swiss and Canadian residents only — not Australia. Identity theft coverage is US-only except New York. Dedicated IP is a separate add-on.
- Introductory billed total
- $169.83 AUD
- Term
- 24 months
- Bonus months
- 3 bonus months
- Effective monthly equivalent
- $6.29 AUD effective monthly equivalent — not a cancellable monthly price
- Renewal
- $165.88 AUD / 12 months
- Month-to-month option
- $30.79 AUD
Checked 2026-09-11
12-month tab 11 Sep 2026: billed A$71.85 for the first 15 months (12 + 3 extra, A$4.79/mo equivalent). Struck A$347.85. Hand check 7185/15=479. Renews at A$110.12/year before tax. VAT may apply. Paid in full at purchase, not monthly instalments. A 12-month One card conflicted between API A$76.35 and a headed session A$82.35 — that One 12-month SKU is not stored here.
- Introductory billed total
- $71.85 AUD
- Term
- 12 months
- Bonus months
- 3 bonus months
- Effective monthly equivalent
- $4.79 AUD effective monthly equivalent — not a cancellable monthly price
- Renewal
- $110.12 AUD / 12 months
- Month-to-month option
- $23.19 AUD
Checked 2026-09-11
1-month tab: A$23.19 per month, billed every month, VAT may apply. This is the cancellable month-to-month Starter option. One monthly was A$26.69; One+ monthly A$30.79. Not the 24-month A$3.49 teaser. API monthly Starter totalPriceVat A$25.51. Checkout not started.
- Introductory billed total
- $23.19 AUD
- Term
- 1 month
- Bonus months
- None
- Effective monthly equivalent
- $23.19 AUD effective monthly equivalent — not a cancellable monthly price
- Renewal
- $23.19 AUD / 1 month
- Month-to-month option
- $23.19 AUD
Checked 2026-09-11
Compare Surfshark subscription cash outlay
Observed price changes
Recorded when a listed price changed. This is not a complete vendor timeline.
- First AU-locale capture from surfshark.com/pricing (Superloop IP) plus AU payment API. 24-month Starter billed A$94.23/27 months, 12-month Starter A$71.85/15 months, monthly Starter A$23.19. VAT exclusive / VAT may apply. One 24-month A/B: A$105.03 vs A$113.13. Checkout not started.
Pros & Cons
Pros
- Public AU pricing grid loaded in AUD from an Australian ISP on 11 Sep 2026
- 24-month, 12-month and 1-month Starter billed totals are printed (before tax; VAT may apply)
- Cancellable monthly Starter is documented at A$23.19 — separate from the 24-month teaser
- Unlimited simultaneous VPN devices on Starter/One/One+ (vendor help), with a fair-usage caveat
- Advertised Australian city exits: Sydney, Brisbane, Adelaide, Melbourne, Perth
- WireGuard and OpenVPN documented on Windows, macOS, iOS and Android; Kill Switch documented on those plus Linux
- 30-day money-back on an initial surfshark.com purchase; auto-renewal can be cancelled in the account
- Deloitte 10 June 2025 ISAE 3000 PDF and SecuRing public infrastructure PDF were opened
Cons
- A$3.49/mo on the 24-month Starter card is an effective monthly equivalent, not a cancellable monthly price
- Listed amounts are before tax; 10% VAT is in the AU API but checkout was not started
- 24-month One billed total conflicted (A$105.03 vs A$113.13) across two headed sessions the same day
- No free plan; the 7-day trial is a paid-plan trial capped at three devices
- Incogni on One+ is not listed for Australian residents; identity-theft coverage is US-only
- Australian exit IPs are not Australian data residency; physical vs virtual remains unknown
- WireGuard is not documented on Linux; Bypasser is not documented on Linux; Dausos is macOS App Store beta only
- Netherlands entity with BVI governing law; Nine Eyes is a separate intelligence-sharing question from Five Eyes
- No independent speed, leak-test or streaming-unblocking results in this review
How this review was made
Reviews separate vendor documentation, editorial analysis and firsthand records. They are not interchangeable.
- Vendor documentation — Public pages from Surfshark and other sites. Recorded HTTP(S) URLs are listed under Sources. A source URL is a document we recorded, not a claim that every sentence on this page was checked against that URL.
- Editorial analysis — SoftwareHQ's written verdict and scores for Australian buyers. The header score is an editorial assessment, not a user-review average, not a lab result, and not a number derived from how many evidence records exist.
- Firsthand records — This review has no firsthand observation records, trial walkthroughs, or screenshots from a logged-in SoftwareHQ account. Missing tests stay not tested.
This page does not rank products by speed or security from documentation or from evidence count.
Checked by SoftwareHQ Editorial Team. There is no named author profile for this page; attribution stays with the SoftwareHQ editorial team. How we test and the editorial policy for scoring, independence and affiliate rules.
Sources
Public pages recorded when this review was compiled. They are not a checklist that every claim was verified, and they are not evidence of hands-on product testing.
- Surfshark official site
- Surfshark pricing (surfshark.com)
- Surfshark privacy policy
- Surfshark Terms Of Service
- Surfshark pricing (surfshark.com)
- Surfshark Australia
- Surfshark about
- Surfshark Trust Center
- Surfshark Press
- Surfshark No Logs
- Surfshark Kill Switch
- Surfshark Split Tunneling
- Surfshark Deloitte Nologs Policy Verified Again
- Surfshark Surfshark Securing Infrastructure Audit
- Surfshark Isae 3000 Report Surfshark No Log Vpn.pdf
- Surfshark Surfshark Infrastructuretestreport 20251217 Public.pdf
- Surfshark Nor 29 Summary.pdf
- Surfshark Plans
- Surfshark 360003088553 Where Is Surfshark Located
- Surfshark 360003069434 How Many Devices Can I Use With Surfshark Simultaneously
- Surfshark 360016978413 How To Use Kill Switch
- Surfshark 360010324739 What Protocols Can I Use With Surfshark
- Surfshark 360017349293 How To Use Surfshark Bypasser On Windows
- Surfshark 24914664935442 How To Use Surfshark Bypasser On Macos
- Surfshark 23010205360914 How To Use Bypasser For Ios
- Surfshark 360008068220 How To Use Bypasser For Android
- Surfshark 360003103653 What Is Surfshark S Refund Policy
- Surfshark 360026123554 Does Surfshark Offer A Free Trial
- Surfshark 360003068834 Do You Keep Any Logs Of My Internet Activities
- Surfshark 8958891462418 What Are Surfshark Subscription Plan Options
- Surfshark 10448039999122 Surfshark Features
- Surfshark 5067279648146 How To Set Up Surfshark Vpn On Linux
- Surfshark 360023512493 What Are Virtual Locations
- Surfshark 34333469217682 What Is Dausos The New Vpn Protocol And How Do I Enable It
- Surfshark Surfshark Merges With Nord Security
Surfshark Alternatives
If Surfshark doesn’t quite fit your needs, consider these alternatives for Australian businesses:
- NordVPN — Personal VPN with prepaid intros, advertised AU exits, login-walled audit.
- ExpressVPN — USD prepaid VPN, advertised AU exits, inspectable KPMG report.
- Proton VPN — Swiss-jurisdiction VPN with a restricted free plan and public Securitum PDFs.
- Mullvad VPN — Swedish numbered-account VPN at a flat €5/month, public audit PDFs. From $5/mo.
- IVPN — Gibraltar-registered numbered-account VPN billed in USD, public Cure53 PDFs. From $6/mo.
Buyer guide
Source-based VPN guides for Surfshark: what a VPN encrypts, billed-term cash, free versus paid caps, how intro differs from renewal, how to read audits, how kill switch, split tunnel and protocols vary by OS, and when a consumer exit is the wrong product for company resources. Not a ranking.