VPN Services: AI Visibility Market Discovery Index
Tracking how AI platforms recommend vpn services. This public AI Visibility Market Discovery Index is updated monthly since July 2026.

On this page
- 01Benchmark Summary
- 02Current Benchmark at a Glance
- 03Research Scope and Qualification
- 04Current Brand Standings
- 05How to Read the Standings
- 06Recommendation Coverage Movement
- 07Largest Increase: ExpressVPN
- 08Category Leader: Proton VPN
- 09Recommendation Placement Snapshot
- 10Buyer-Intent Distribution
- 11Historical Measurement Record
- 12Evidence and Source Layer
Benchmark Summary
Proton VPN led the VPN Services benchmark in October 2026 with a valid recommendation coverage of 81.2%, ahead of NordVPN at 78.9% by 2.3 percentage points. The month produced no significant change for any tracked brand on the primary metric. ExpressVPN posted the largest coverage increase, rising to 71.7% in October 2026 from 69.9% in September 2026, while Private Internet Access posted the largest decline, falling to 28.7% in October 2026 from 33.3% in September 2026.
Across the full July-to-October series, leadership has remained with Proton VPN in each measured month, moving from 83.9% in July 2026 to 81.2% in October 2026. NordVPN moved from 80.1% in July 2026 to 78.9% in October 2026 over the same period. ExpressVPN moved from 71.0% to 71.7%, Surfshark from 77.1% to 76.9%, and Private Internet Access from 29.6% to 28.7% across the series. TunnelBear remained the only brand classified as a significant decliner over the series, falling from 13.6% in July 2026 to 7.2% in October 2026, a decline recorded in each of the three months since July 2026.
The benchmark began with 800 prompt-surface observations in each month and produced 693 qualified observations in October 2026 after qualification.
AI recommendation trend
valid recommendation coverage, Jul 2026 to Oct 2026
- Proton VPN81.2%
- NordVPN78.9%
- Surfshark76.9%
- ExpressVPN71.7%
- Private Internet Access28.7%
- Mullvad VPN28.6%
- Windscribe26.1%
- CyberGhost VPN17.3%
- IPVanish8.9%
- TunnelBear7.2%
Current Benchmark at a Glance
Measure | Jul 2026 | Oct 2026 | Movement |
|---|---|---|---|
Qualified benchmark observations | 707 | 693 | Down 14 |
Tracked brands | 10 | 10 | No change |
Qualified surface breadth | 6 | 6 | No change |
Recommendation-shaped answer share | 51.9% | 59.5% | Up 7.6 points |
Valid recommendation shortlist share | 84.3% | 86.7% | Up 2.4 points |
Leader by valid recommendation coverage | Proton VPN (83.9%) | Proton VPN (81.2%) | Down 2.7 points |
Qualified surface breadth counts the canonical AI surface families with at least one qualified observation: ChatGPT, Copilot, Gemini, Perplexity, AI Overviews, and AI Mode. The benchmark captured all six families in each month of the series. In August 2026, recommendation-shaped answer share was 50.6% and valid recommendation shortlist share was 81.5%; in September 2026 those figures were 49.0% and 81.0%.
For the strategic interpretation of this benchmark, read CiteWorks Studio's analysis of How AI Search Is Recommending VPN Services
Want the full Authority Index
The paid deep-dive adds competitor threat profiles, the gap matrix, citation failure map, platform-by-platform recovery roadmap, and client-specific economic modeling.
Research Scope and Qualification
The public benchmark is narrower than the raw collection universe by design. The funnel below shows how observations were qualified.
Research stage | Jul 2026 | Oct 2026 | What it represents |
|---|---|---|---|
Source prompt-surface observations | 800 | 800 | Total prompts collected across surfaces |
Unique questions | 534 | 586 | Distinct questions asked |
Brand / competitor mentions | 800 | 800 | Prompts mentioning a brand or competitor |
Relevant observations | 798 | 799 | On-topic for the category |
Irrelevant observations | 2 | 1 | Off-topic or unusable |
Qualified benchmark observations | 707 | 693 | Public denominator |
Brand-level percentages use the qualified observations as the public denominator, not the raw collection. See AI Visibility Market Discovery Methodology for the full qualification process.
Current Brand Standings
Questions This Section Answers
- Which VPN brands lead the October 2026 AI recommendation standings?
- How do presence rate and top-three rate differ among the leading VPN brands?
- Which brands combine strong recommendation coverage with high rank-one placement?
This table is the primary current-month benchmark view, sorted by valid recommendation coverage.
Brand | Presence rate | Valid recommendation coverage | Top-three rate | Rank-one rate | Net sentiment |
|---|---|---|---|---|---|
Proton VPN | 95.8% | 81.2% | 51.4% | 12.6% | 0.88 |
NordVPN | 99.1% | 78.9% | 73.6% | 54.8% | 0.82 |
Surfshark | 95.5% | 76.9% | 57.6% | 5.8% | 0.83 |
ExpressVPN | 91.6% | 71.7% | 40.3% | 6.2% | 0.80 |
Private Internet Access | 36.8% | 28.7% | 6.1% | 1.1% | 0.82 |
Mullvad VPN | 33.9% | 28.6% | 8.1% | 1.6% | 0.87 |
Windscribe | 35.9% | 26.1% | 9.2% | 0.7% | 0.78 |
CyberGhost VPN | 23.1% | 17.3% | 6.6% | 3.9% | 0.81 |
IPVanish | 12.4% | 8.9% | 0.9% | 0.0% | 0.73 |
TunnelBear | 10.2% | 7.2% | 1.4% | 0.0% | 0.73 |
How to Read the Standings
- Presence rate: share of qualified observations where the brand is mentioned in any form.
- Valid recommendation coverage: share of qualified observations where the brand appears in a recommendation context, the benchmark's primary metric.
- Top-three rate: share of qualified observations where the brand appears among the top three recommended options.
- Rank-one rate: share of qualified observations where the brand is the first recommendation.
- Net sentiment: positive minus negative mentions divided by total mentions, scored from -1 to 1.
For formulas and denominator rules, see AI Visibility Market Discovery Metric Definitions.
Recommendation Coverage Movement
Questions This Section Answers
- Which VPN brands gained or lost recommendation coverage since July 2026?
- Was any month-over-month VPN coverage change in October 2026 statistically significant?
Brand | Jul 2026 | Oct 2026 | Movement since baseline |
|---|---|---|---|
CyberGhost VPN | 16.7% | 17.3% | Up 0.6 points |
ExpressVPN | 71.0% | 71.7% | Up 0.7 points |
IPVanish | 9.0% | 8.9% | Down 0.1 points |
Mullvad VPN | 29.1% | 28.6% | Down 0.5 points |
NordVPN | 80.1% | 78.9% | Down 1.2 points |
Private Internet Access | 29.6% | 28.7% | Down 0.9 points |
Proton VPN | 83.9% | 81.2% | Down 2.7 points |
Surfshark | 77.1% | 76.9% | Down 0.2 points |
TunnelBear | 13.6% | 7.2% | Down 6.4 points |
Windscribe | 25.9% | 26.1% | Up 0.2 points |
Want the full Authority Index
The paid deep-dive adds competitor threat profiles, the gap matrix, citation failure map, platform-by-platform recovery roadmap, and client-specific economic modeling.
October 2026 produced no significant month-over-month movement on valid recommendation coverage. Nine of the ten tracked brands were classified as stable across the series. Private Internet Access recorded the largest prior-to-current move, falling 4.6 points from 33.3% in September 2026 to 28.7% in October 2026, a change within normal month-to-month variation. Mullvad VPN and ExpressVPN also moved upward from September 2026, by 2.3 and 1.8 points respectively.
Largest Increase: ExpressVPN
ExpressVPN recorded the largest coverage increase of the month, rising to 71.7% in October 2026 from 69.9% in September 2026, a move within normal variation. Across the series, ExpressVPN moved from 71.0% in July 2026 to 71.7% in October 2026 and has now risen in each of the two months since September 2026. Its presence rate held flat while its top-three rate rose and its rank-one rate eased.
Category Leader: Proton VPN
Proton VPN led the category with 81.2% valid recommendation coverage in October 2026, down from 83.9% in July 2026, 80.7% in August 2026, and 80.3% in September 2026. A stable leadership position still resulted in a lower score than the July baseline. Proton VPN held the highest net sentiment among the leading brands at 0.88 in October 2026.
The gap between Proton VPN and NordVPN stood at 2.3 percentage points in October 2026, compared with 3.8 points in July 2026. The gap between CyberGhost VPN and TunnelBear widened in each month of the series, from 3.1 to 10.1 percentage points.
Recommendation Placement Snapshot
Questions This Section Answers
- Why do NordVPN, Surfshark, and Proton VPN show different rank-one rates despite similar coverage?
- How prominently does each leading VPN brand appear within top-three recommendations?
Coverage alone does not show how prominently a brand is recommended. The leading brands show distinct placement patterns.
Brand | Oct 2026 top-three rate | Oct 2026 rank-one rate | Jul 2026 top-three rate | Jul 2026 rank-one rate |
|---|---|---|---|---|
NordVPN | 73.6% | 54.8% | 63.8% | 47.2% |
Surfshark | 57.6% | 5.8% | 55.5% | 6.5% |
Proton VPN | 51.4% | 12.6% | 46.4% | 15.1% |
Want the full Authority Index
The paid deep-dive adds competitor threat profiles, the gap matrix, citation failure map, platform-by-platform recovery roadmap, and client-specific economic modeling.
Similar coverage hides sharply different first-position outcomes. NordVPN held a rank-one rate of 54.8% in October 2026, compared with 12.6% for Proton VPN and 5.8% for Surfshark, despite coverage for the three brands falling within 4.3 percentage points of one another.
Buyer-Intent Distribution
Questions This Section Answers
- What types of buyer-intent questions currently drive the VPN recommendation benchmark?
- Are pricing and multi-brand comparison questions represented in the qualified VPN observations?
All qualified observations in each month of the series fell into the brand recommendation class, which captures discovery and consideration behavior.
Buyer-intent class | Jul 2026 | Oct 2026 |
|---|---|---|
Brand Recommendation | 707 | 693 |
Pricing & Value | 0 | 0 |
Multi-Brand Comparison | 0 | 0 |
Total qualified observations | 707 | 693 |
All 709 qualified observations in August 2026 and all 700 in September 2026 also fell into the brand recommendation class. The current public series cannot answer pricing or multi-brand comparison questions.
Historical Measurement Record
Measurement | Qualified observations | Coverage leader | Leader coverage | Largest coverage movement |
|---|---|---|---|---|
Jul 2026 | 707 | Proton VPN | 83.9% | Baseline month — no prior comparison |
Aug 2026 | 709 | Proton VPN | 80.7% | ExpressVPN down 3.6 points |
Sep 2026 | 700 | Proton VPN | 80.3% | TunnelBear down 5.0 points |
Oct 2026 | 693 | Proton VPN | 81.2% | Private Internet Access down 4.6 points |
Proton VPN has led every measured month despite a declining score since the July baseline.
Evidence and Source Layer
Questions This Section Answers
- What evidence does the benchmark capture for each VPN recommendation observation?
- Does a cited source prove it directly caused an AI recommendation?
The benchmark is built from prompt-level observations that retain the query, AI/search surface, answer, brand outcome, recommendation placement, sentiment, and, where exposed, citations or attributable evidence sources. Source presence is evidence about the information environment, not proof that the source caused the recommendation.
Scope Boundaries
This public benchmark does not measure:
- Market share or attributable sales
- Every possible AI response across all model versions and configurations
- Organic-search ranking or search engine optimization performance
- Social media mention volume or sentiment outside AI surfaces
- Private or sponsored channels, including gated enterprise deployments
- Causality from a metric movement alone; movements indicate correlation, not cause
Top 10 Cited Domains
Questions This Section Answers
- Which domains AI platforms cite most when recommending VPN services?
- How concentrated are VPN citations across the top domains versus the long tail?
- Which VPN brand-owned domains appear among the most-cited sources?
Across all AI platform responses in this measurement period, 6,490 citations were observed across 569 unique domains.
Rank | Domain | Citations | Share | Platforms citing |
|---|---|---|---|---|
1 | youtube.com | 565 | 8.7% | Gemini, AI Mode, AI Overviews, Perplexity |
2 | reddit.com | 377 | 5.8% | ChatGPT, Gemini, AI Mode, AI Overviews, Perplexity |
3 | security.org | 376 | 5.8% | ChatGPT, Copilot, Gemini, AI Mode, AI Overviews, Perplexity |
4 | cnet.com | 354 | 5.5% | Gemini, AI Mode, AI Overviews, Perplexity |
5 | techradar.com | 289 | 4.5% | ChatGPT, Copilot, Gemini, AI Mode, AI Overviews, Perplexity |
6 | google.com | 262 | 4.0% | AI Mode, AI Overviews |
7 | thebestvpn.com | 256 | 3.9% | ChatGPT, Copilot, Gemini, AI Mode, AI Overviews, Perplexity |
8 | tomsguide.com | 201 | 3.1% | ChatGPT, Copilot, Gemini, AI Mode, AI Overviews, Perplexity |
9 | protonvpn.com | 177 | 2.7% | ChatGPT, Gemini, AI Mode, AI Overviews, Perplexity |
10 | nordvpn.com | 167 | 2.6% | ChatGPT, Copilot, Gemini, AI Mode, AI Overviews, Perplexity |
Citations are moderately concentrated, with the top 10 domains accounting for 46.6% of all citations and the remaining 559 domains sharing the rest — a long tail rather than a single dominant outlet. Two tracked brands' own domains appear in the top 10: protonvpn.com at rank 9 and nordvpn.com at rank 10, both cited across five or more surface families. Editorial and review sources dominate the list, with security.org, cnet.com, techradar.com, thebestvpn.com, and tomsguide.com collectively accounting for 19.8% of citations, alongside video and community platforms at ranks 1 and 2.
About This Benchmark
The LLM Authority Index AI Visibility Market Discovery Index is a neutral, industry-level benchmark tracking how AI and search surfaces recommend brands across canonical surface families. It is built from prompt-level observations with audited, reproducible methodology.
- AI Visibility Market Discovery Methodology
- AI Visibility Market Discovery Metric Definitions
- AI Visibility Market Discovery Research Standards
- Modeled AI Visibility Authority Value
Get a Company-Level Authority Index
The public industry benchmark shows category-level standings. A company-level Authority Index can go deeper.
Want the full Authority Index
The paid deep-dive adds competitor threat profiles, the gap matrix, citation failure map, platform-by-platform recovery roadmap, and client-specific economic modeling.
Keep reading
Related posts
Industry Reports
Consumer Banking Alabama: AI Visibility Market Discovery Index
Read this blog on LLM Authority Index.
ReadIndustry Reports
Women’s Clothing Rental: AI Visibility Market Discovery Index
Read this blog on LLM Authority Index.
ReadIndustry Reports
Used Car Retailers: AI Visibility Market Discovery Index
Read this blog on LLM Authority Index.
Read