
Surfshark conducted its first-ever ESG materiality assessment in 2024, inviting users to help define the company’s environmental and social priorities. The findings showed a clear emphasis on cybersecurity, freedom of expression, transparency, and climate change mitigation. These user-driven insights are now shaping Surfshark’s long-term strategy and operational goals.
The company measured Scope 1, 2, and, for the first time, Scope 3 greenhouse gas emissions, covering direct operations, purchased goods, business travel, and more. Surfshark’s offices in Vilnius and Kaunas are now powered by 100% renewable electricity, earning top sustainability certifications such as BREEAM and Enefit. Additionally, the company joined the UN Global Compact, aligning with international environmental and human rights standards.
Surfshark also took part in various eco-friendly initiatives, including a company-wide Earth Day walking challenge, employee-led flea markets, and the planting of over 9,000 trees in Lithuania alongside other companies.
Surfshark, which employs more than 450 people across 20 countries, is committed to fostering a values-driven work environment. Employees devoted over 3,200 hours to education and personal growth in 2024. The organization prioritized both physical and mental wellness, providing counseling, meditation places, and health insurance.
Additionally, Surfshark implemented advantages like flexible work schedules, equitable parental leave, and diversity celebrations, such as Pride Month and other cultural activities.
In addition to VPN technology, Surfshark supported digital freedom by working with international NGOs. The firm provided safe access to more than 300 journalists and activists in areas with high levels of censorship through its Emergency VPN program. In order to increase digital awareness, Surfshark also offered a free cybersecurity course called Social Engineering 101 and supported events like Privacy Camp 2024.
In order to promote accessibility, Surfshark collaborated with Johannes Kepler University to assess and enhance its website and apps' usability for individuals with impairments.
Surfshark continues to invest in its infrastructure to ensure user safety. All VPN servers now run on RAM-only infrastructure and are automatically rebuilt to reduce exposure windows. The company supports modern encryption ciphers and protocols like WireGuard, OpenVPN, and IKEv2, combined with AES-256 and ChaCha20 encryption.
External audits by Cure53 confirmed Surfshark’s browser extensions and server infrastructure as secure, while Deloitte verified its no-logs policy. Surfshark’s antivirus was also recognized by VB100 for meeting strong security standards.
Surfshark’s report outlines plans to expand sustainability programs, improve emissions tracking, and maintain a workplace that values transparency and inclusion. While the company remains focused on protecting users’ digital privacy, it also recognizes the importance of being a responsible global organization.
You may access the full Surfshark Impact Report 2024.