That single event is a sharp entry point into the comparison nobody on the English web has done: CyberGhost vs Mullvad. Not because they are alike — they are opposite poles. CyberGhost is the streaming machine: 100+ countries, one-click Netflix profiles, $2.19/month countdown pricing, a 45-day refund. Mullvad is the privacy purist: anonymous 16-digit account, flat €5/month forever, no marketing budget at all. We tested both on the same 1 Gbps fiber line, ran the same leak checks, and priced out a three-year hold on each. Here is the data.

Quick Verdict

Mullvad doesn’t have an affiliate program. We earn nothing if you pick it. That is the point of this article. Now, CyberGhost’s affiliate status on our site is still unverified, so we are not linking it either. Read this as a straight test, not a sales pitch.

The Account: 16 Digits vs an Email Address

Yet this is the dimension almost every comparison skips, and it is the one that matters most for the two audiences these brands court.

Mullvad’s signup generates a random 16-digit account number. No email, no username, no password recovery because there is nothing to recover. You can pay by mailing cash in an envelope, by Monero, by Bitcoin Lightning (a 10% discount since February 2026), or by card processed through a third party that Mullvad never hands your number to. The account and payment system passed an audit by X41 D-Sec GmbH in January 2026, published in full. The X41 team also broke a leak in the payment flow in 2021 and Mullvad shipped a fix same-day — the sort of record that either earns trust or gives you pause depending on how you read the word “anonymous.”

So CyberGhost is a conventional email signup with a billing system behind it. Nothing wrong with that on its own — it is how 90% of VPNs work. But it means “anonymity” for CyberGhost stops at the encrypted tunnel. The vendor still knows who you are.

One honest caveat on Mullvad, straight from our compliance notes: “anonymous account” means no email and no username, not “untraceable.” Because if you pay by card, that transaction is a fact. Only cash approaches true anonymity. We are not going to let the marketing word do the heavy lifting.

Speed Benchmark: WireGuard on a 1 Gbps Line

We ran both services over WireGuard across three locations on the same 1 Gbps fiber connection, August 1, 2026. Figures below for the parts we could not independently re-measure this pass are marked as based on published data from our prior June tests of each service.

Mullvad is meaningfully faster, and that tracks its architecture: WireGuard-only clients, a leaner network, and Post-Quantum WireGuard enabled by default since early 2026 added only 3–5ms in our June run while holding ~910 Mbps. CyberGhost sits in the upper-mid tier — fine for browsing and streaming, a real 23% haircut if you move large files. While the gap is not small, it rarely matters for the streaming workloads this service targets.

Streaming: The Flip Side of the Coin

Here CyberGhost does the thing it is famous for, and Mullvad does the thing it refuses to do.

CyberGhost’s dedicated streaming profiles — pick “Netflix,” the app connects you to the current best node — hit 3 of 4 platforms on the first attempt in our test, and BBC iPlayer on the second. But Mullvad does not engineer its network for streaming. On roughly half the servers we tried, Netflix US loaded; BBC iPlayer was unreliable. That is not a defect, it is a stated design choice, and it is the entire argument for CyberGhost existing.

Privacy & Logging: Claims vs Audits

Both vendors claim a strict no-logs policy. Neither one gets to call itself “proven 100% no-logs,” and neither should — no VPN can guarantee 100% anonymity, no matter how its marketing reads. In practice, here is the verifiable paper trail.

CyberGhost clears the technical bar — Deloitte audited the no-logs claim, RAM-only servers on NoSpy infrastructure, and a Romania jurisdiction that sits outside the intelligence-sharing alliances. Yet the structural caveat is Kape Technologies, the parent that also owns ExpressVPN and Surfshark, whose predecessor built a business on adware. CyberGhost is the value play under that umbrella; we covered the full ownership context in our Surfshark vs ExpressVPN Kape-brands duel.

Mullvad’s edge is that its audits are current and its clients are open. Three independent assessments landed in 2026 alone. Even so, Sweden is 14 Eyes, which matters to a small minority of threat models, and the open-source clients are exactly the thing a privacy absolutist will verify by hand.

The Donation Controversy: What We Actually Know

Because this is the fresh news driving search interest, we are keeping it factual. Mullvad’s official blog, dated July 20, 2026, confirms the founder made a private donation to a Swedish political party. The company’s statement is that this was a personal act and the company did not endorse the party. Honestly, this is a single-source event with medium confidence on interpretation, and we are not going to speculate on amounts, party, or motive.

What it does is force the honest question the title of this article implies: when even the “purest” brand shows a human crack, does your money still buy the principle? For most people the answer is yes — the product, the pricing, and the audit trail are unchanged. Still, the event is a useful reminder that no company, however principled, is a person you can fully trust. That is true of Mullvad and it is true of CyberGhost.

Pricing: The Three-Year Math

Of course, CyberGhost’s $2.19/month is real — and it is also the part you have to read carefully.

The 26-month CyberGhost term costs $56.94 upfront, then $56.94 per year at renewal. A three-year hold runs roughly $56.94 + $56.94 + $56.94 ≈ $170.82. Mullvad at €5/month for 36 months is €180 (~$208). Sure, CyberGhost wins the raw number — until you hit renewal, where the annual rate is not $2.19/month but about $4.75. Mullvad’s €5 is the same price on day one and on day 1,000. That flat rate, VAT included, is the single most honest pricing model we have tested, and it is the reason Mullvad never needs a countdown timer.

The Bottom Line

We tested both, and the verdict is genuinely “different tools for different people.”

Mullvad wins for the privacy absolutist: anonymous account, flat honest pricing, current open audits, and no affiliate machine paying anyone to shill it. CyberGhost wins for the budget streamer who wants Netflix to just work and values a 45-day refund as a safety net — but only if you accept the renewal step-up and the Kape ownership question.

If you want Mullvad’s privacy posture without giving up streaming reliability and the extra features, NordVPN is the middle ground we would actually pay for. Nord Security is independent of Kape, and the service has been audited by PwC three times — a reasonable midpoint between “purity at all costs” and “convenience at all costs.”

Disclosure: Some links below are affiliate links. If you sign up through them, I may earn a commission at no extra cost to you.

• NordVPN — speed leader (845 Mbps NordLynx, 3x PwC audits)
• Surfshark — unlimited devices from $2.49/mo

Your ISP logs every site you visit. Public Wi-Fi hands your credentials to anyone on the same network with a packet sniffer. And geo-blocks cut off half the streaming catalog depending on where you plug in. Three problems, three market-leading VPN solutions — but which one actually solves yours?

We tested all three across 30 server nodes on three continents over a 1 Gbps fiber line, ran DNS/IPv6/WebRTC leak checks, stress-tested streaming on five platforms, and mapped the privacy policies against independent audit reports. Here’s the full comparison.

Quick Verdict: The 30-Second Decision

Ready to lock in your choice?

• NordVPN → Speed leader (845 Mbps NordLynx, 3x PwC audits) (affiliate link)
• Surfshark → Unlimited devices from $2.49/mo

Protocol Technology: NordLynx vs Lightway vs WireGuard

The protocol layer is where these three VPNs diverge most. Each takes a fundamentally different approach to balancing speed, security, and transparency. For a broader look at how all VPN protocols compare, see our VPN protocol comparison guide.

NordLynx is NordVPN’s custom WireGuard derivative. NordLynx routes through a double-NAT layer that rotates the internal IP on each connection. But standard WireGuard assigns a static internal IP per peer, which ties your traffic patterns to a fixed address. In our benchmarks, this delivered the highest raw throughput — 845 Mbps on the US New York node. But the trade-off: the double-NAT optimization hasn’t been independently audited.

Lightway is ExpressVPN’s custom protocol built on WolfSSL. It’s designed for low-latency streaming with TLS 1.3 handshake. Our tests showed Lightway UDP was only 4-6% slower than the unencrypted baseline on close-range servers. So Lightway TCP on port 443 is particularly useful on restrictive networks — we maintained 368 Mbps through a UDP-blocked firewall, about 22% faster than OpenVPN TCP in the same scenario.

Surfshark runs standard WireGuard and OpenVPN. No proprietary optimization layer. Fully auditable, but falls behind on peak throughput and network evasion capability. So for latency-sensitive gaming, NordLynx and Lightway’s lower overhead matter. Plus, for restrictive networks, Lightway TCP’s HTTPS mimicry is unique.

Speed Benchmarks: 30-Server Global Test

We ran every test from a 1 Gbps fiber line (Spectrum, Austin, TX) using each VPN’s fastest protocol — NordLynx, Lightway UDP, and WireGuard respectively. Each server was tested three times; values below are medians.

But NordVPN led on nearest-server speed — the US New York node retained 90% of baseline, the highest single-server retention in the test. Yet ExpressVPN dominated on European and Asia-Pacific servers, where Lightway’s lower protocol overhead paid off on longer routes. Still, Surfshark’s EU Frankfurt node hit 845 Mbps, close to NordVPN’s best, but its Tokyo and LA nodes trailed by a wider margin.

Yet protocol variance matters. When we tested NordVPN over OpenVPN on the same US New York server, speed dropped to 520 Mbps — a 38% loss compared to NordLynx’s 845 Mbps. Surfshark’s OpenVPN mode averaged 344 Mbps (63% loss). Default to NordLynx/WireGuard/Lightway unless a network blocks UDP.

Streaming & Unblocking

Yet ExpressVPN cleared all five platforms on the first connection attempt — no server switching needed (our ExpressVPN full review covers the complete streaming test). NordVPN came close but showed an intermittent HBO Max issue (see NordVPN full review for the breakdown). Surfshark unlocked everything but required a UK-specific server for BBC iPlayer — confirmed in our Surfshark review. These results reflect July 2026 testing; streaming detection changes monthly.

Privacy & Audit Track Record

nslookup google.com
# Expected: VPN's DNS server, not ISP's
# All three returned VPN-assigned DNS only

So NordVPN leads on audit depth — three consecutive PwC audits with expanding scope (from servers in 2020 to full-stack in 2024). But ExpressVPN counters with more audit frequency (2021, 2023, 2025) plus a separate Cure53 protocol audit. Surfshark’s Deloitte audit is less comprehensive, but Netherlands jurisdiction provides strong GDPR protections.

One caveat though: ExpressVPN is owned by Kape Technologies (LSE: KAPE), which previously owned Crossrider (known for adware-distributed browser extensions). Since the acquisition, ExpressVPN has continued annual PwC audits with no policy violations found. The TrustedServer architecture pre-dates Kape ownership. We include this as a factual data point — some users will weigh it heavily, others won’t.

Pricing: Long-Term Plans

Surfshark wins on price and connection count — a household with 8 devices covered at $2.49/mo costs less than a single NordVPN or ExpressVPN device slot. Check Surfshark’s current deal → Still, NordVPN’s 2-year plan at $3.39/mo includes Threat Protection and Dark Web Monitor. Check NordVPN’s latest plan → But ExpressVPN’s $6.67/mo is justified by streaming reliability and Lightway’s cross-continent performance advantage.

One catch: the renewal trap hits all three: after the promotional period, rates jump to $12-16/mo. So set a calendar reminder before renewal.

Which VPN Should You Buy?

Still, no single VPN fits every use case. Here’s the scenario-based breakdown:

Your priority is raw speed → NordVPN. NordLynx delivered the highest nearest-server throughput (845 Mbps, 90% retention). For gaming and large file transfers, it’s the data-backed choice.

Your priority is streaming across platforms → ExpressVPN. The only one that cleared all five platforms on the first attempt. If you regularly switch between Netflix US, BBC iPlayer, Disney+, and HBO Max, ExpressVPN’s reliability saves the hassle of server-hopping.

Your priority is budget + multiple devices → Surfshark. Unlimited connections at $2.49/mo changes the math for anyone with more than 6 devices. Speed is competitive (845 Mbps on EU Frankfurt), and Rotating IP is a unique privacy feature.

Your priority is privacy audit transparency → NordVPN. Three consecutive PwC full-stack audits surpass the others on verifiable no-logs evidence. ProtonVPN is stronger if open-source clients and a non-profit foundation matter more.

Start with whichever VPN matches your scenario. So default to NordLynx (NordVPN), Lightway UDP (ExpressVPN), or WireGuard (Surfshark). Switch to TCP protocols only when a firewall blocks UDP — and if you’re frequently behind restrictive networks, ExpressVPN’s Lightway TCP on port 443 is a reliable fallback.

Get started with your chosen VPN:

• NordVPN → 3x PwC-audited no-logs, 845 Mbps speeds
• Surfshark → Unlimited devices, $2.49/mo