VPN Services: AI Visibility Market Discovery Index

Tracking how AI platforms recommend vpn services. This public AI Visibility Market Discovery Index is updated monthly since July 2026.

Mark Huntley, J.D.
By Mark Huntley, J.D.Growth Strategist & AI Discovery Analyst
8 minutes read

Benchmark Summary

Proton VPN led the VPN Services benchmark in October 2026 with a valid recommendation coverage of 81.2%, ahead of NordVPN at 78.9% by 2.3 percentage points. The month produced no significant change for any tracked brand on the primary metric. ExpressVPN posted the largest coverage increase, rising to 71.7% in October 2026 from 69.9% in September 2026, while Private Internet Access posted the largest decline, falling to 28.7% in October 2026 from 33.3% in September 2026.

Across the full July-to-October series, leadership has remained with Proton VPN in each measured month, moving from 83.9% in July 2026 to 81.2% in October 2026. NordVPN moved from 80.1% in July 2026 to 78.9% in October 2026 over the same period. ExpressVPN moved from 71.0% to 71.7%, Surfshark from 77.1% to 76.9%, and Private Internet Access from 29.6% to 28.7% across the series. TunnelBear remained the only brand classified as a significant decliner over the series, falling from 13.6% in July 2026 to 7.2% in October 2026, a decline recorded in each of the three months since July 2026.

The benchmark began with 800 prompt-surface observations in each month and produced 693 qualified observations in October 2026 after qualification.

AI recommendation trend

valid recommendation coverage, Jul 2026 to Oct 2026

0%25%50%75%100%Jul 2026Aug 2026Sep 2026Oct 2026
  • Proton VPN81.2%
  • NordVPN78.9%
  • Surfshark76.9%
  • ExpressVPN71.7%
  • Private Internet Access28.7%
  • Mullvad VPN28.6%
  • Windscribe26.1%
  • CyberGhost VPN17.3%
  • IPVanish8.9%
  • TunnelBear7.2%

Current Benchmark at a Glance

Measure

Jul 2026

Oct 2026

Movement

Qualified benchmark observations

707

693

Down 14

Tracked brands

10

10

No change

Qualified surface breadth

6

6

No change

Recommendation-shaped answer share

51.9%

59.5%

Up 7.6 points

Valid recommendation shortlist share

84.3%

86.7%

Up 2.4 points

Leader by valid recommendation coverage

Proton VPN (83.9%)

Proton VPN (81.2%)

Down 2.7 points

Qualified surface breadth counts the canonical AI surface families with at least one qualified observation: ChatGPT, Copilot, Gemini, Perplexity, AI Overviews, and AI Mode. The benchmark captured all six families in each month of the series. In August 2026, recommendation-shaped answer share was 50.6% and valid recommendation shortlist share was 81.5%; in September 2026 those figures were 49.0% and 81.0%.

For the strategic interpretation of this benchmark, read CiteWorks Studio's analysis of How AI Search Is Recommending VPN Services

Want the full Authority Index

The paid deep-dive adds competitor threat profiles, the gap matrix, citation failure map, platform-by-platform recovery roadmap, and client-specific economic modeling.

Research Scope and Qualification

The public benchmark is narrower than the raw collection universe by design. The funnel below shows how observations were qualified.

Research stage

Jul 2026

Oct 2026

What it represents

Source prompt-surface observations

800

800

Total prompts collected across surfaces

Unique questions

534

586

Distinct questions asked

Brand / competitor mentions

800

800

Prompts mentioning a brand or competitor

Relevant observations

798

799

On-topic for the category

Irrelevant observations

2

1

Off-topic or unusable

Qualified benchmark observations

707

693

Public denominator

Brand-level percentages use the qualified observations as the public denominator, not the raw collection. See AI Visibility Market Discovery Methodology for the full qualification process.

Current Brand Standings

Questions This Section Answers

  • Which VPN brands lead the October 2026 AI recommendation standings?
  • How do presence rate and top-three rate differ among the leading VPN brands?
  • Which brands combine strong recommendation coverage with high rank-one placement?

This table is the primary current-month benchmark view, sorted by valid recommendation coverage.

Brand

Presence rate

Valid recommendation coverage

Top-three rate

Rank-one rate

Net sentiment

Proton VPN

95.8%

81.2%

51.4%

12.6%

0.88

NordVPN

99.1%

78.9%

73.6%

54.8%

0.82

Surfshark

95.5%

76.9%

57.6%

5.8%

0.83

ExpressVPN

91.6%

71.7%

40.3%

6.2%

0.80

Private Internet Access

36.8%

28.7%

6.1%

1.1%

0.82

Mullvad VPN

33.9%

28.6%

8.1%

1.6%

0.87

Windscribe

35.9%

26.1%

9.2%

0.7%

0.78

CyberGhost VPN

23.1%

17.3%

6.6%

3.9%

0.81

IPVanish

12.4%

8.9%

0.9%

0.0%

0.73

TunnelBear

10.2%

7.2%

1.4%

0.0%

0.73

How to Read the Standings

  • Presence rate: share of qualified observations where the brand is mentioned in any form.
  • Valid recommendation coverage: share of qualified observations where the brand appears in a recommendation context, the benchmark's primary metric.
  • Top-three rate: share of qualified observations where the brand appears among the top three recommended options.
  • Rank-one rate: share of qualified observations where the brand is the first recommendation.
  • Net sentiment: positive minus negative mentions divided by total mentions, scored from -1 to 1.

For formulas and denominator rules, see AI Visibility Market Discovery Metric Definitions.

Recommendation Coverage Movement

Questions This Section Answers

  • Which VPN brands gained or lost recommendation coverage since July 2026?
  • Was any month-over-month VPN coverage change in October 2026 statistically significant?

Brand

Jul 2026

Oct 2026

Movement since baseline

CyberGhost VPN

16.7%

17.3%

Up 0.6 points

ExpressVPN

71.0%

71.7%

Up 0.7 points

IPVanish

9.0%

8.9%

Down 0.1 points

Mullvad VPN

29.1%

28.6%

Down 0.5 points

NordVPN

80.1%

78.9%

Down 1.2 points

Private Internet Access

29.6%

28.7%

Down 0.9 points

Proton VPN

83.9%

81.2%

Down 2.7 points

Surfshark

77.1%

76.9%

Down 0.2 points

TunnelBear

13.6%

7.2%

Down 6.4 points

Windscribe

25.9%

26.1%

Up 0.2 points

Want the full Authority Index

The paid deep-dive adds competitor threat profiles, the gap matrix, citation failure map, platform-by-platform recovery roadmap, and client-specific economic modeling.

October 2026 produced no significant month-over-month movement on valid recommendation coverage. Nine of the ten tracked brands were classified as stable across the series. Private Internet Access recorded the largest prior-to-current move, falling 4.6 points from 33.3% in September 2026 to 28.7% in October 2026, a change within normal month-to-month variation. Mullvad VPN and ExpressVPN also moved upward from September 2026, by 2.3 and 1.8 points respectively.

Largest Increase: ExpressVPN

ExpressVPN recorded the largest coverage increase of the month, rising to 71.7% in October 2026 from 69.9% in September 2026, a move within normal variation. Across the series, ExpressVPN moved from 71.0% in July 2026 to 71.7% in October 2026 and has now risen in each of the two months since September 2026. Its presence rate held flat while its top-three rate rose and its rank-one rate eased.

Category Leader: Proton VPN

Proton VPN led the category with 81.2% valid recommendation coverage in October 2026, down from 83.9% in July 2026, 80.7% in August 2026, and 80.3% in September 2026. A stable leadership position still resulted in a lower score than the July baseline. Proton VPN held the highest net sentiment among the leading brands at 0.88 in October 2026.

The gap between Proton VPN and NordVPN stood at 2.3 percentage points in October 2026, compared with 3.8 points in July 2026. The gap between CyberGhost VPN and TunnelBear widened in each month of the series, from 3.1 to 10.1 percentage points.

Recommendation Placement Snapshot

Questions This Section Answers

  • Why do NordVPN, Surfshark, and Proton VPN show different rank-one rates despite similar coverage?
  • How prominently does each leading VPN brand appear within top-three recommendations?

Coverage alone does not show how prominently a brand is recommended. The leading brands show distinct placement patterns.

Brand

Oct 2026 top-three rate

Oct 2026 rank-one rate

Jul 2026 top-three rate

Jul 2026 rank-one rate

NordVPN

73.6%

54.8%

63.8%

47.2%

Surfshark

57.6%

5.8%

55.5%

6.5%

Proton VPN

51.4%

12.6%

46.4%

15.1%

Want the full Authority Index

The paid deep-dive adds competitor threat profiles, the gap matrix, citation failure map, platform-by-platform recovery roadmap, and client-specific economic modeling.

Similar coverage hides sharply different first-position outcomes. NordVPN held a rank-one rate of 54.8% in October 2026, compared with 12.6% for Proton VPN and 5.8% for Surfshark, despite coverage for the three brands falling within 4.3 percentage points of one another.

Buyer-Intent Distribution

Questions This Section Answers

  • What types of buyer-intent questions currently drive the VPN recommendation benchmark?
  • Are pricing and multi-brand comparison questions represented in the qualified VPN observations?

All qualified observations in each month of the series fell into the brand recommendation class, which captures discovery and consideration behavior.

Buyer-intent class

Jul 2026

Oct 2026

Brand Recommendation

707

693

Pricing & Value

0

0

Multi-Brand Comparison

0

0

Total qualified observations

707

693

All 709 qualified observations in August 2026 and all 700 in September 2026 also fell into the brand recommendation class. The current public series cannot answer pricing or multi-brand comparison questions.

Historical Measurement Record

Measurement

Qualified observations

Coverage leader

Leader coverage

Largest coverage movement

Jul 2026

707

Proton VPN

83.9%

Baseline month — no prior comparison

Aug 2026

709

Proton VPN

80.7%

ExpressVPN down 3.6 points

Sep 2026

700

Proton VPN

80.3%

TunnelBear down 5.0 points

Oct 2026

693

Proton VPN

81.2%

Private Internet Access down 4.6 points

Proton VPN has led every measured month despite a declining score since the July baseline.

Evidence and Source Layer

Questions This Section Answers

  • What evidence does the benchmark capture for each VPN recommendation observation?
  • Does a cited source prove it directly caused an AI recommendation?

The benchmark is built from prompt-level observations that retain the query, AI/search surface, answer, brand outcome, recommendation placement, sentiment, and, where exposed, citations or attributable evidence sources. Source presence is evidence about the information environment, not proof that the source caused the recommendation.

Scope Boundaries

This public benchmark does not measure:

  • Market share or attributable sales
  • Every possible AI response across all model versions and configurations
  • Organic-search ranking or search engine optimization performance
  • Social media mention volume or sentiment outside AI surfaces
  • Private or sponsored channels, including gated enterprise deployments
  • Causality from a metric movement alone; movements indicate correlation, not cause

Top 10 Cited Domains

Questions This Section Answers

  • Which domains AI platforms cite most when recommending VPN services?
  • How concentrated are VPN citations across the top domains versus the long tail?
  • Which VPN brand-owned domains appear among the most-cited sources?

Across all AI platform responses in this measurement period, 6,490 citations were observed across 569 unique domains.

Rank

Domain

Citations

Share

Platforms citing

1

youtube.com

565

8.7%

Gemini, AI Mode, AI Overviews, Perplexity

2

reddit.com

377

5.8%

ChatGPT, Gemini, AI Mode, AI Overviews, Perplexity

3

security.org

376

5.8%

ChatGPT, Copilot, Gemini, AI Mode, AI Overviews, Perplexity

4

cnet.com

354

5.5%

Gemini, AI Mode, AI Overviews, Perplexity

5

techradar.com

289

4.5%

ChatGPT, Copilot, Gemini, AI Mode, AI Overviews, Perplexity

6

google.com

262

4.0%

AI Mode, AI Overviews

7

thebestvpn.com

256

3.9%

ChatGPT, Copilot, Gemini, AI Mode, AI Overviews, Perplexity

8

tomsguide.com

201

3.1%

ChatGPT, Copilot, Gemini, AI Mode, AI Overviews, Perplexity

9

protonvpn.com

177

2.7%

ChatGPT, Gemini, AI Mode, AI Overviews, Perplexity

10

nordvpn.com

167

2.6%

ChatGPT, Copilot, Gemini, AI Mode, AI Overviews, Perplexity

Citations are moderately concentrated, with the top 10 domains accounting for 46.6% of all citations and the remaining 559 domains sharing the rest — a long tail rather than a single dominant outlet. Two tracked brands' own domains appear in the top 10: protonvpn.com at rank 9 and nordvpn.com at rank 10, both cited across five or more surface families. Editorial and review sources dominate the list, with security.org, cnet.com, techradar.com, thebestvpn.com, and tomsguide.com collectively accounting for 19.8% of citations, alongside video and community platforms at ranks 1 and 2.

About This Benchmark

The LLM Authority Index AI Visibility Market Discovery Index is a neutral, industry-level benchmark tracking how AI and search surfaces recommend brands across canonical surface families. It is built from prompt-level observations with audited, reproducible methodology.

Get a Company-Level Authority Index

The public industry benchmark shows category-level standings. A company-level Authority Index can go deeper.

Get my free AI Company Index

Want the full Authority Index

The paid deep-dive adds competitor threat profiles, the gap matrix, citation failure map, platform-by-platform recovery roadmap, and client-specific economic modeling.