Kill switch and split tunnelling for remote work

What a kill switch does

NordVPN's description is a good plain-English version: a kill switch will "stop your data from being exposed if your VPN connection drops." If the VPN tunnel goes down, for example when you move between Wi-Fi networks, the kill switch blocks traffic until the VPN is back.

NordVPN: kill switch listed on its download page (checked 11 Nov 2026).
Surfshark: kill switch feature page (checked 11 Nov 2026).
Proton VPN: kill switch listed as supported on Windows, macOS, Linux, Android (as part of the operating system) and iOS/iPadOS (checked 11 Nov 2026).
CyberGhost: "Automatic Kill Switch" on its features page (checked 11 Nov 2026).

Turn it on before you need it. Look for it in the app's settings; the name varies a little by provider.

What split tunnelling does

Split tunnelling lets you choose which apps (and, on some platforms, websites) go through the VPN and which use your normal connection. Remote workers use it when a work tool, a company VPN or a device on the local network doesn't work with the VPN on. Anything you exclude is not protected by the VPN, so keep the list short.

Where each provider lists split tunnelling (checked 11 Nov 2026)
Provider	Platforms listed
NordVPN	Android, Android TV and Windows (plus website exclusions in its browser extensions). Not listed for macOS or iOS.
Surfshark	Android (apps and websites) and Windows (apps only). Surfshark calls it Bypasser.
Proton VPN	Paid plans only: Windows, macOS (experimental, excluding apps only), Linux app, Android, Android TV and the browser extension. Not iOS.
CyberGhost	Android only, for now.

When a dedicated IP matters

Some workplaces only let known IP addresses reach their systems. A dedicated IP gives you the same address every time, so your IT team can allow it.

NordVPN: Yes, as a paid add-on at checkout on every plan.
Surfshark: Yes, as a paid add-on added from your account after purchase.
CyberGhost: Yes, as a paid add-on to an existing subscription, covered by its money-back guarantee.
Proton VPN: not on personal plans; dedicated IPs are for Proton VPN for Business only.

How these features count in our remote-work score

Joint top for remote work: Surfshark and CyberGhost (checked 11 Nov 2026). Scores: Surfshark 92.2/100, CyberGhost 90/100, NordVPN 75.5/100, Proton VPN 66.3/100.

The remote-work weights

Each provider gets a score out of 100, built only from facts it publishes on its own site or in published audit reports. Here is what counts, and how much.

Best for remote work: what we score and how many points each criterion is worth
What we score	Share of the score	Points
Audited no-logs (named auditor + year)		25
Renewal price		20
Split tunnelling + kill switch		20
Dedicated IP available		15
Simultaneous devices		10
Money-back period		10
Total		100

How the maths works

Yes-or-no features earn their full points if the provider has them and nothing if it doesn't. Where one line covers two features (split tunnelling + kill switch), each feature is worth half.
Prices are compared with the cheapest provider. The cheapest gets full points; the others get points in proportion, so a price twice as high earns half the points.
Devices and money-back days are compared with the most generous provider, which gets full points; the others get points in proportion (30 days when the best is 45 earns two-thirds). If a provider allows unlimited devices, it gets the full device points and fixed limits get none.
Fresh, verified facts only. A fact counts only if we have checked it on the provider's own page in the last 30 days. If any fact this score needs is missing or out of date, we don't name a winner until it's re-checked.
Joint winners. Providers within 3 points of the top score are shown as joint top, each with its own check date. We never break a tie. If all four are that close, we name no winner.
Price must be in US$. Where price counts, a provider whose US$ price we couldn't verify is listed but not ranked. We never convert currencies.
Commission is never an input. What a provider pays us has no effect on any score or order.

Scores are rounded to one decimal place. Facts used in this score were checked 11 Nov 2026.

Pros
- A kill switch stops traffic leaving your device outside the VPN if the connection drops.
- Split tunnelling lets chosen apps use your normal connection, for example a tool that won't work through the VPN.
- All four providers list a kill switch; all four list split tunnelling on at least one platform.
Cons
- With the kill switch on, you lose your connection until the VPN reconnects.
- Apps you exclude with split tunnelling are not protected by the VPN.
- Split tunnelling support differs a lot by platform, especially on Mac and iPhone.
Who it's for
- Remote workers on public Wi-Fi, in hotels or co-working spaces.
- Anyone who needs one work app to bypass the VPN while everything else goes through it.
Who it's not for
- People who need split tunnelling on an iPhone: none of the four lists it for iOS.
- Anyone whose employer requires its own company VPN only: ask your IT team first.

Questions people ask

Do NordVPN, Surfshark, Proton VPN and CyberGhost all have a kill switch?

Yes. Each lists a kill switch on its own site (checked 11 Nov 2026).

Which of them offer split tunnelling on a Mac?

Only Proton VPN lists it for macOS, as an experimental feature that excludes apps. NordVPN, Surfshark and CyberGhost don't list macOS (checked 11 Nov 2026).

Can I get a dedicated IP on a personal plan?

NordVPN, Surfshark and CyberGhost sell a dedicated IP as a paid add-on. Proton VPN offers dedicated IPs only on its business plans (checked 11 Nov 2026).