Start with why you want a VPN
Buy a VPN for one clear reason and judge everything against that reason. Are you mainly after privacy from your ISP or employer, evading country blocks for streaming, protecting yourself on public Wi‑Fi, or hiding torrenting activity? Different needs change which technical and commercial trade‑offs matter.
Match threat model to features
If your concern is casual eavesdropping on public Wi‑Fi you need good encryption, a reliable kill switch and apps that work on your phone and laptop. If your concern is government requests for user data, then jurisdiction, logging policy and independent assurance (audits) are decisive. If you only need to spoof location for a single streaming service, server count and location distribution matter more than hardcore privacy features.
Five things that decide value more than the sticker price
-
Logging policy and independent audits
A named vendor statement that they do not keep activity or connection logs is only a claim until independently checked. Several large providers publish no‑logs reports from auditors; for example, ExpressVPN's server and privacy controls were audited by PwC and NordVPN has repeatedly commissioned Deloitte to examine its no‑logs controls. Cite the auditor and date before trusting the claim. Audits differ in scope: some check server configuration and procedures, others test apps or build pipelines — read what was examined and when. expressvpn.com
-
Jurisdiction and corporate structure
The legal home of the company (and any holding companies) affects how easy it is for a government to compel disclosure and whether gag orders apply. Companies based inside Five Eyes countries face different legal pressures than those in privacy‑favourable jurisdictions. Look up the company’s jurisdiction and whether it publishes transparency reports or a warrant canary.
-
Pricing model, real monthly cost and renewal terms
“Entry monthly” rates are advertising bait if you pay monthly or if renewals are higher. Understand whether prices are flat‑rate, tiered, seat‑based or free/paid hybrid. Our catalogue lists entry monthly prices and where available an annual equivalent — for example ExpressVPN has an entry monthly of $3.49 with a tiered model, while NordVPN lists $3.09 entry with a flat‑rate model. Use the vendor’s published pricing, cancellation and refund pages to confirm the real out‑of‑pocket cost for the duration you intend to use it.
-
What “free” actually means
Free plans and free trials vary wildly. Some vendors offer a genuinely unrestricted free tier; others limit data, speeds or server choices. Proton VPN documents a free plan that they say offers the same cryptographic protections as paid tiers but with limited server choice; Windscribe defaults to a free account with small monthly bandwidth unless you verify an email to increase it. Read the vendor’s own free‑plan terms before assuming it’s a full substitute for a paid plan. protonvpn.com
-
Device limits, simultaneous connections and router support
Cheap per‑month figures can be worthless if the service limits you to two devices and you need to cover a house full of kit. Check the published simultaneous‑connection limit and whether the provider supports routers (so one subscription covers every device on your home network). Some services advertise generous device allowances; others offer seat‑based pricing where cost grows with the number of users or devices.
Technical items you should confirm before comparing servers and speeds
-
Protocols and performance tunability
Look for support for modern protocols (WireGuard or OpenVPN variants) and options that let you choose UDP/TCP, port selection, or obfuscation for censored networks. WireGuard tends to be faster and simpler; OpenVPN gives more configurability in adverse networks.
-
Kill switch, split tunnelling and leak protection
These are hygiene features. A kill switch prevents your traffic leaking if the VPN drops; split tunnelling lets you exclude trusted apps from the tunnel; DNS and IPv6 leak protection stop default system resolvers leaking queries. Confirm these are available in the vendor’s apps and whether they are on by default.
-
Server footprint and special‑purpose servers
For streaming or geo‑testing you need servers in the countries that matter. For privacy and P2P, check whether there are dedicated P2P servers, multi‑hop (double VPN) options, or Tor‑over‑VPN routes. Mullvad, for example, publishes its pricing and connection model and notes limits such as device counts; read the vendor docs for server types and use cases. mullvad.net
Commercial and payment considerations
Decide in advance how you will pay. If you value anonymity, check whether the vendor accepts anonymous payment methods (cash via vouchers, cryptocurrency) and whether that option has the same terms as card subscriptions. Check refund windows and whether the refund is pro‑rata or full within a period. Also confirm renewal prices and whether the listed monthly equivalent assumes an annual prepayment.
How to read vendor claims on audits, speeds and privacy
When a vendor cites an audit, note three things: the auditing firm’s name, the date and the scope. An audit that checks build pipelines and server configuration yields different assurances from a basic policy attestation. ExpressVPN’s PwC work examined server configuration and the company’s TrustedServer approach; NordVPN has repeatedly commissioned Deloitte to verify its no‑logs controls. Always open the audit report or the summary on the vendor site and read the section describing what was and wasn’t tested. expressvpn.com
Practical checklist to use when you open vendor pages
- Find the vendor’s jurisdiction and the company name on their legal or about page.
- Locate the published pricing table and the renewal price; calculate the cost for the commitment you intend to make.
- Open the privacy policy and search for “logs”, “connection”, “activity” and “retention”.
- Find any independent audits and confirm auditor, date and scope — don’t accept “audited” without a link to a report or summary.
- Check device limits, router support and payment methods (especially if you need anonymous payment).
- Confirm kill switch, leak protection and split tunnelling appear in the app documentation.
- If you rely on streaming or P2P, verify server locations and whether those server types are explicitly supported.
How to compare prices sensibly
Compare like with like. If one vendor advertises $1.11 entry monthly and another $5.50, check whether those figures are for the same billing period and whether either is a long‑term prepaid price. Our catalogue lists entry monthly rates and notes where the vendor supplies an annual‑equivalent monthly figure — use the vendor’s published billing page to confirm exact totals. For free plans, read the vendor’s free‑plan limitations; Proton VPN documents a free tier they say keeps the same cryptographic protections as paid plans but limits server choice, while Windscribe documents small default monthly bandwidth for free accounts unless you verify email. protonvpn.com
What to do next
Do not compare based on one or two headline numbers. Use the checklist above to shortlist three providers that meet your threat model and device needs, then inspect each vendor’s published pricing, refund policy and audit materials. Only after you have confirmed jurisdiction, no‑logs assurances, device limits and real renewal figures should you factor in throughput tests or third‑party speed charts.
When you are ready for product comparisons, start with the providers in this piece’s context: ExpressVPN, NordVPN, Surfshark VPN, Private Internet Access, Proton VPN and others in the catalogue — check each vendor’s live pricing and published documentation before you decide.
Read audit scope and renewal rules before you are swayed by a low monthly headline.