Surfshark VPN : Award-winning VPN service

[jasonX]

INDEPENDENT AUDITS

Surfshark commissioned its first audit in November 2018 and its second in May 2021. Both were carried out by Germany security company, Cure53. The second audit looked at Surfshark's infrastructure and VPN configuration, giving a level of assurance about the unseen portions of the company. These audits are a testament that Surfshark commitment and proves a valuable step a VPN can take toward establishing trust. See excerpt of Cure53's Security Assessment of Surfshark Management below. 

"In Cure53’s expert opinion, this project confirmed a very solid security premise at Surfshark.  The overall outcome should be regarded as good and the testing team has no doubt that the Surfshark maintainers have a clear understanding of security and privacy challenges associated with being a VPN provider. The VPN protocols and their attached configuration implemented by Surfshark rely on sound defaults and are additionally fine-tuned by attention to detail in configuration of constructs, logging and cipher-suites..."

 

Cure53 is a German cybersecurity firm founded by Dr. Mario Heiderich. It has almost a decade of experience in the field, including an audit of a South Korean parental monitoring mobile app. The audit uncovered security issues big enough for the SK government to withdraw support for the app.
 

Cure53 on Surfshark VPN browser extension

 

Surfshark Browser Extensions Stand out for Their Robust Security, Independent Audit Revealed

 

Surfshark server infrastructure undergoes an independent audit

 

Warrant Canary

Surfshark is committed to being transparent and taking full control of our service. Private information of all users has never been disclosed or seized, nor have we been compromised or suffered a data breach.

As of August 24, 2022 Surfshark has received:
 

• Zero National Security letters;
  
• Zero Gag orders;
  
• Zero Warrants from a government organization.
  

To ensure your privacy and security, Surfshark guarantees a strict no logs policy – "We don’t monitor, log or store your online activities".
 

Warrant canary