SAME CATEGORY. YOUR PRIORITIES.

Build a comparison.

Compare evidence, costs and trade-offs. Adjust the criteria to reflect your own workflow.

CategoryProduct 1Product 2Product 3 (optional)

MAKE THE SCORE YOURS

What matters most?

Core capabilities carry 32 points; workflow depth carries 68. AI contributes the category-specific weight shown below within those totals. Change group priorities and see every contribution update.

How the score is calculated →

Connection protection 20% base weightDevices & networks 16% base weightPrivacy & transparency 16% base weightProtection & account controls 16% base weightAI capabilities 12% base weightOperational detail 20% base weight

Documented fit across available plans · unknowns shown as ranges · no customer ratings

Show checksShowing fewer rows does not change the score.

VPN for individual professionals evidence comparison
Features & decision context	Proton VPN Proton VPN 64–98/100 documented fit 66% evidence coverage Core capabilities25.6–30.4 / 32 pts8/10 checks with established status Workflow depth38.7–68 / 68 pts9/18 checks with established status	NordVPN NordVPN 58–98/100 documented fit 60% evidence coverage Core capabilities24–32 / 32 pts7/10 checks with established status Workflow depth33.6–65.6 / 68 pts7/18 checks with established status
How AI changes fitSame priorities, with and without AI	64–98 with AI73–98 without AIFeature-fit points; not measured ROI	58–98 with AI65–97 without AIFeature-fit points; not measured ROI
Supplier website	Visit Proton VPN	Visit NordVPN Ad · affiliate linkWe may earn a commission if you buy through this link.
Good fit for	Individuals who value a free starting tier and inspectable applications.	Individual remote workers needing a VPN and optional browsing protection.
Look more closely when	A company assuming consumer Plus includes centrally managed private-network access.	An employer requiring central employee access policies, SSO and offboarding in this consumer subscription.
Pricing snapshotDifferent billing units are not directly comparable	$0.00account / month Free tier has one simultaneous connection and limited/random country selection. Paid Plus pricing must be confirmed in the local configurator. Pricing source	See pricingaccount / month Price is region/term dependent; the reviewed page rendered a different local currency. Verify the US or UK checkout and renewal rather than relying on a converted estimate. Pricing source
Connection protection 20% base weight
Core capabilityEncrypted tunnelDocument modern encrypted VPN protocols. Ask for a demonstration Demonstrate encrypted tunnel with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Supported4 / 4 pts WireGuard/OpenVPN and strong encryption are documented. Official documentation · Oct 20, 2026Source	Supported4 / 4 pts Modern encrypted VPN protocols are documented. Official documentation · Oct 20, 2026Source
Core capabilityKill switchBlock traffic if the VPN tunnel fails. Ask for a demonstration Demonstrate kill switch with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Supported4 / 4 pts Kill switch/always-on options are documented. Official documentation · Oct 20, 2026Source	Supported4 / 4 pts A kill switch is documented. Official documentation · Oct 20, 2026Source
Depth checkDNS leak protectionPrevent DNS requests escaping the protected connection. Ask for a demonstration Demonstrate dns leak protection with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Supported6 / 6 pts DNS leak protection is documented. Official documentation · Oct 20, 2026Source	Supported6 / 6 pts DNS leak protection is documented. Official documentation · Oct 20, 2026Source
Depth checkMulti-hop routingRoute through multiple VPN locations with documented conditions. Ask for a demonstration Demonstrate multi-hop routing with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Supported6 / 6 pts Secure Core routing is included in Plus. Official documentation · Oct 20, 2026Source	Supported6 / 6 pts Double VPN routing is available on supported apps. Official documentation · Oct 20, 2026Source
Devices & networks 16% base weight
Core capabilityDesktop applicationsOffer native apps for major desktop platforms. Ask for a demonstration Demonstrate desktop applications with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Supported3.2 / 3.2 pts Windows, macOS and Linux clients are offered. Official documentation · Oct 20, 2026Source	Supported3.2 / 3.2 pts Desktop applications are offered. Official documentation · Oct 20, 2026Source
Core capabilityMobile applicationsOffer apps for both iOS and Android. Ask for a demonstration Demonstrate mobile applications with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Supported3.2 / 3.2 pts Both major mobile platforms are supported. Official documentation · Oct 20, 2026Source	Supported3.2 / 3.2 pts iOS and Android applications are offered. Official documentation · Oct 20, 2026Source
Depth checkSplit tunnellingRoute selected apps or destinations outside the VPN, with platform limits stated. Ask for a demonstration Demonstrate split tunnelling with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Supported4.8 / 4.8 pts Split tunnelling is documented with platform-specific options. Official documentation · Oct 20, 2026Source	Limited2.4 / 4.8 pts Split tunnelling is platform-dependent; confirm support on the intended OS. Official documentation · Oct 20, 2026Source
Depth checkRestricted-network modeProvide a documented obfuscation or censorship-resistant connection method. Ask for a demonstration Demonstrate restricted-network mode with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Supported4.8 / 4.8 pts Stealth and alternative routing are documented. Official documentation · Oct 20, 2026Source	Supported4.8 / 4.8 pts Obfuscated server options are documented. Official documentation · Oct 20, 2026Source
Privacy & transparency 16% base weight
Core capabilityPublished logging policyExplain which connection or activity data is retained. Ask for a demonstration Demonstrate published logging policy with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Supported3.2 / 3.2 pts A no-logs policy is published. Official documentation · Oct 20, 2026Source	Supported3.2 / 3.2 pts A published no-logs policy is linked. Official documentation · Oct 20, 2026Source
Core capabilityPublished external auditLink a named external audit or report rather than an unsupported badge. Ask for a demonstration Demonstrate published external audit with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Limited1.6 / 3.2 pts External audits are referenced; this review did not inspect a full audit report. Official documentation · Oct 20, 2026Source	Not verified0–3.2 / 3.2 pts The named audit report was not reviewed in this evidence set. Not verified · Oct 20, 2026Source
Depth checkAuditable application sourcePublish application source for the major client platforms. Ask for a demonstration Demonstrate auditable application source with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Supported4.8 / 4.8 pts Application source is published. Official documentation · Oct 20, 2026Source	Not verified0–4.8 / 4.8 pts Open source across all major client platforms is not established. Not verified · Oct 20, 2026Source
Depth checkLocation selectionChoose the country or server location on the compared paid plan. Ask for a demonstration Demonstrate location selection with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Supported4.8 / 4.8 pts Plus enables broad server-location selection. Official documentation · Oct 20, 2026Source	Supported4.8 / 4.8 pts Paid plans allow server-location choice. Official documentation · Oct 20, 2026Source
Protection & account controls 16% base weight
Core capabilityMalicious-site blockingBlock known malicious destinations. Ask for a demonstration Demonstrate malicious-site blocking with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Supported3.2 / 3.2 pts NetShield blocks malicious domains in Plus. Official documentation · Oct 20, 2026Source	Supported3.2 / 3.2 pts Basic includes DNS-based malicious-site blocking. Official documentation · Oct 20, 2026Source
Core capabilityMultiple concurrent devicesDocument the allowed number of simultaneous connections. Ask for a demonstration Demonstrate multiple concurrent devices with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Supported3.2 / 3.2 pts Plus allows 10 simultaneous devices. Official documentation · Oct 20, 2026Source	Supported3.2 / 3.2 pts The plan table specifies 10 concurrent devices. Official documentation · Oct 20, 2026Source
Depth checkMalware download scanningInspect downloaded files, with OS restrictions stated. Ask for a demonstration Demonstrate malware download scanning with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Not verified0–4.8 / 4.8 pts Download file scanning is not established by the VPN sources. Not verified · Oct 20, 2026Source	Supported4.8 / 4.8 pts Complete includes desktop download scanning. Official documentation · Oct 20, 2026Source
Depth checkDedicated IP optionOffer a dedicated address and disclose the extra plan or charge. Ask for a demonstration Demonstrate dedicated ip option with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Not verified0–4.8 / 4.8 pts Dedicated IP was not established for consumer Plus. Not verified · Oct 20, 2026Source	Supported4.8 / 4.8 pts Complete Max lists dedicated IP; verify local availability. Official documentation · Oct 20, 2026Source
AI capabilities 12% base weight
Core capabilityDocumented AI threat detectionDocument an actual machine-learning threat detection capability. Ask for a demonstration Demonstrate documented ai threat detection with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Not verified0–2.4 / 2.4 pts A specific AI detector is not documented. Not verified · Oct 20, 2026Source	Not verified0–2.4 / 2.4 pts Automated detection alone does not establish a specific AI method. Not verified · Oct 20, 2026Source
Core capabilityAI incident explanationExplain a detected incident using contextual AI output. Ask for a demonstration Demonstrate ai incident explanation with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Not verified0–2.4 / 2.4 pts An AI incident assistant is not documented. Not verified · Oct 20, 2026Source	Not verified0–2.4 / 2.4 pts AI incident explanations were not documented. Not verified · Oct 20, 2026Source
Depth checkAI-specific controlsDocument controls or limitations specifically for AI threat processing. Ask for a demonstration Demonstrate ai-specific controls with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Not verified0–3.6 / 3.6 pts AI-specific controls are not documented. Not verified · Oct 20, 2026Source	Not verified0–3.6 / 3.6 pts AI-specific controls were not established. Not verified · Oct 20, 2026Source
Depth checkAI decision traceExpose a reviewable explanation or audit record of AI security decisions. Ask for a demonstration Demonstrate ai decision trace with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test.	Not verified0–3.6 / 3.6 pts An AI decision trail is not documented. Not verified · Oct 20, 2026Source	Not verified0–3.6 / 3.6 pts An AI decision audit trail was not established. Not verified · Oct 20, 2026Source
Operational detail 20% base weight
Depth checkExport a WireGuard configuration for another clientDemonstrate: Export a WireGuard configuration for another client. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. Ask for a demonstration Demonstrate: Export a WireGuard configuration for another client. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test.	Supported2.5 / 2.5 pts WireGuard configurations can be downloaded. WireGuard configuration generation; supported client/router setup is separate. Global capability evidence; local plan availability and interface language are not inferred. Official documentation · Oct 21, 2026Source	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source
Depth checkConfigure inbound port forwardingDemonstrate: Configure inbound port forwarding. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. Ask for a demonstration Demonstrate: Configure inbound port forwarding. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test.	Supported2.5 / 2.5 pts Supported paid-plan clients offer port forwarding. Paid plans; supported Windows, macOS and Linux GUI applications and P2P servers. Global capability evidence; local plan availability and interface language are not inferred. Official documentation · Oct 21, 2026Source	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source
Depth checkChoose a custom DNS resolverDemonstrate: Choose a custom DNS resolver. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. Ask for a demonstration Demonstrate: Choose a custom DNS resolver. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test.	Supported2.5 / 2.5 pts The Windows application supports custom DNS. Windows application capability; other operating systems and plan entitlements not established here. Global capability evidence; local plan availability and interface language are not inferred. Official documentation · Oct 21, 2026Source	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source
Depth checkApply automatic connection rules per networkDemonstrate: Apply automatic connection rules per network. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. Ask for a demonstration Demonstrate: Apply automatic connection rules per network. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test.	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source
Depth checkControl local-network access while connectedDemonstrate: Control local-network access while connected. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. Ask for a demonstration Demonstrate: Control local-network access while connected. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test.	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source
Depth checkCarry IPv6 traffic through the VPN tunnelDemonstrate: Carry IPv6 traffic through the VPN tunnel. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. Ask for a demonstration Demonstrate: Carry IPv6 traffic through the VPN tunnel. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test.	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source
Depth checkRevoke a lost device's active VPN sessionDemonstrate: Revoke a lost device's active VPN session. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. Ask for a demonstration Demonstrate: Revoke a lost device's active VPN session. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test.	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source
Depth checkDeploy VPN protection on a supported routerDemonstrate: Deploy VPN protection on a supported router. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. Ask for a demonstration Demonstrate: Deploy VPN protection on a supported router. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test.	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source
AI usage and limits	The reviewed VPN documentation does not establish an embedded AI assistant or AI incident workflow. Smart protocol selection and DNS filtering are not assumed to be AI Lumo and Scribe are separate products AI documentation	Automated threat protection is documented, but the reviewed sources do not establish all AI-specific checks. Rule-based blocking is not automatically AI Separate NordLabs experiments are not credited as VPN functionality AI documentation
Additional costs to ask about
Integration shortlist
Research date	Oct 20, 2026 Full source record →	Oct 20, 2026 Full source record →

TURN THE COMPARISON INTO A DECISION

Run the same demo with every finalist.

Demonstrate dns leak protection with our own account and explain limits, permissions and the required plan.
Demonstrate multi-hop routing with our own account and explain limits, permissions and the required plan.
Demonstrate split tunnelling with our own account and explain limits, permissions and the required plan.
Demonstrate restricted-network mode with our own account and explain limits, permissions and the required plan.
Demonstrate auditable application source with our own account and explain limits, permissions and the required plan.
Demonstrate location selection with our own account and explain limits, permissions and the required plan.
Demonstrate malware download scanning with our own account and explain limits, permissions and the required plan.
Demonstrate dedicated ip option with our own account and explain limits, permissions and the required plan.
Demonstrate ai-specific controls with our own account and explain limits, permissions and the required plan.
Demonstrate ai decision trace with our own account and explain limits, permissions and the required plan.

Use the same sample data and success criteria. Check the result, the handoff, the permissions and the final bill.

Build a comparison.

What matters most?

Proton VPN

NordVPN

Run the same demo with every finalist.