Norton VPN Review 2026
By ChrisFounder & Lead AnalystNorton 360 bundled VPN checkbox
Norton Secure VPN is bundled with Norton 360. Gen Digital (parent company) also owns Avast, Avira, and BullGuard -- all of which are being consolidated. US jurisdiction and the Avast Jumpshot data-selling scandal in the company's portfolio are concerns.
As a standalone VPN, Norton is basic and priced against bundles rather than against dedicated VPNs. As a component of a Norton subscription it is a reasonable inclusion, and the published VerSprite assessments give its no-logs claim more backing than most suite VPNs have. Better standalone VPNs still exist at most price points.
- Existing Norton 360 subscribers
Performance Scores
Privacy & Security
Security and Protocols
Norton VPN offers four protocols: Mimic, WireGuard, OpenVPN and IPsec. Mimic is proprietary, built by Gen Digital, and Norton states it has used post-quantum encryption since 2021. WireGuard and OpenVPN are the open-source options, and their presence matters because a proprietary protocol cannot be inspected by anyone outside the company.
The apps include a kill switch and a no-log policy that Norton states as not tracking, logging or saving browsing activity.
Norton publishes independent audit reports for that claim. VerSprite, an outside security firm, carried out Technical Privacy Impact Assessments in August 2024 and July 2025, plus a Mimic protocol security assessment in November 2025.
The reports are worth reading rather than just counting. The 2024 assessment found two potential privacy concerns on production edge servers, where under certain conditions information could be logged that would help identify a VPN user. Validation retests in April and July 2024 confirmed the changes were made and that the data was no longer being logged, and the overall privacy impact was rated Low. The 2025 assessment again found two issues, including one edge server role that could log a client IP address under specific error conditions, and a retest in August 2025 confirmed remediation, taking the overall privacy impact rating to None.
One scope limit matters: both assessments covered the backend infrastructure only. Client-side testing of the Windows, Mac, iOS and Android apps was explicitly excluded. So the no-logs claim is independently checked at the servers, but the apps are not covered. Norton also remains a US company, Gen Digital, and states it collects minimal account data such as your email address while not storing browsing details. See our scoring methodology for how audit evidence is weighed.
Speed and Performance
WireGuard is available across Norton's apps and is the protocol to choose for throughput. Mimic exists mainly to keep working on networks that block recognizable VPN traffic, so it is the fallback rather than the default choice for speed.
We do not run our own speed benchmarks. Our speed score reflects published independent benchmarks and provider-reported figures, applied the same way to every provider we score.
Streaming and Unblocking
Norton does not market catalog unblocking as a headline feature and does not run dedicated streaming servers, which is typical for a VPN sold as part of a security suite rather than as a standalone product.
If reaching a particular streaming library is your main reason for wanting a VPN, our best VPN for streaming guide covers the providers built for it.
Server Network
Norton describes over 100 server locations worldwide, including city-level choices across 25 cities in 18 US states. City-level selection inside the US is genuinely useful if you need to appear in a specific region rather than just a specific country.
Norton publishes location counts rather than a raw server count, so the two are not directly comparable with providers that advertise thousands of servers. Check Norton's current location list if a specific country matters to you.
Who Norton VPN Is For
Norton VPN makes most sense for people already paying for a Norton security subscription, where the VPN is one component rather than the reason for the purchase. The 60-day money-back guarantee is longer than almost anything else in the market and lowers the risk of trying it.
As a standalone privacy tool the case is stronger than it used to be, since the no-logs claim is now backed by published third-party assessments. What has not changed is US jurisdiction under Gen Digital, and the fact that those assessments stopped at the backend rather than covering the apps. If privacy is the priority, compare it with the options in our best VPNs for privacy guide or our top-ranked pick in the NordVPN review.
Pricing & Plans
Pricing and specs verified 2026-08-20. Check the provider for current pricing.
Pros & Cons
- Independently audited no-logs policy (VerSprite)
- Included with Norton 360
- 60-day money-back guarantee
- Four protocols including WireGuard and OpenVPN
- 5 to 10 devices depending on plan
- US jurisdiction (Gen Digital)
- Gen Digital owns Avast (Jumpshot scandal)
- Audits covered backend infrastructure only, not the apps
- Basic as standalone product
- Overpriced standalone
Bottom Line
A free bonus for Norton 360 subscribers. Not worth buying as a standalone VPN.
Norton VPN FAQ
Has Norton VPN been independently audited?
Yes. VerSprite carried out Technical Privacy Impact Assessments published in August 2024 and July 2025, and a Mimic protocol security assessment in November 2025. Norton links all three reports from its no-log policy page. The 2024 assessment rated the overall privacy impact Low and the 2025 assessment rated it None, in both cases after issues found during testing were confirmed remediated on retest. Both assessments covered backend infrastructure only and excluded the apps.
Where is Norton VPN based?
Norton VPN is operated by Gen Digital, a United States company. US jurisdiction places it inside the Five Eyes intelligence-sharing alliance, which is the main structural mark against it as a privacy tool.
Does Norton VPN keep logs?
Norton states a strict no-log policy and says it does not track, log or save browsing activities. That claim has been independently assessed by VerSprite, which published Technical Privacy Impact Assessments in August 2024 and July 2025. Both assessments initially found issues that could have helped identify users, both were confirmed remediated on retest, and the 2025 report rates the overall privacy impact as None. Both covered backend infrastructure only, not the apps.
What is Norton's Mimic protocol?
Mimic is a proprietary VPN protocol built by Gen Digital, the company behind Norton. Norton states it has used post-quantum encryption since 2021. Being proprietary, it cannot be independently inspected the way WireGuard and OpenVPN can, both of which Norton also supports.
How many devices does Norton VPN cover?
It depends on the tier. Norton sells Standard, Plus and Ultimate plans, with the lower two covering 5 devices and Ultimate covering 10.
How much does Norton VPN cost?
Norton sells three annual tiers, Standard, Plus and Ultimate, with higher tiers bundling additional Norton security tools rather than extra VPN capability. First-year pricing is discounted against the standard renewal rate, so check what the plan renews at before you buy.
Does Norton VPN have a money-back guarantee?
Yes, Norton advertises a 60-day money-back guarantee, which is one of the longest offered by any provider we score.
Is Norton VPN good for streaming?
It is not built for it. Norton does not market catalog unblocking or run dedicated streaming servers. See our best VPN for streaming guide if that is your main use case.
Where to Go Next
Builder, tinkerer, privacy advocate. I believe privacy is a right, not a product feature.