VPNs pay some of the highest first-sale commissions in software, often 40% to 100%. The big difference is what happens after: some pay on every renewal, some pay once. Most big VPN programs are single-tier. PureVPN and Proton VPN both run a real second tier.
Proton VPNproton.meVPN/security · Tunes (Proton partner portal)
Both tiers are official Proton partner program rates. Tier 1 pays 100% of first monthly payments, 40% of new 1 or 2 year plans, and 30% of renewals. Payouts monthly by bank transfer, $100 minimum.
PureVPNpurevpn.comVPN/security · in-house
PureVPN's official page confirms the tier 1 rates, the 90-day cookie and that a two-tier program exists. The 10% second-tier rate only appears in third-party listings, so confirm it in your dashboard after approval.
NordVPNnordvpn.comVPN/security · in-house (also Awin)
Single tier. The same program also lets you promote other Nord Security products such as NordPass. The 30-day cookie is a third-party figure, not confirmed on the official page. Confirm in your dashboard after approval.
CyberGhostcyberghostvpn.comVPN/security · Kape (HasOffers) and networks
CyberGhost's official page only says up to 100% in commissions. The renewal rate and the 30 to 45 day cookie come from third-party listings and some list no renewals at all, so confirm in your dashboard after approval or with your affiliate manager.
Private Internet Accessprivateinternetaccess.comVPN/security · Kape affiliates (direct)
PIA's official pages say up to 33% and commission on new and recurring sales over a customer's lifetime. 33% is a maximum, not a base rate. The cookie is not published officially; networks commonly list 30 days (third-party figure). Confirm in your dashboard after approval.
Surfsharksurfshark.comVPN/security · in-house, Impact, CJ, Awin and others
Revenue share on new sales only, last-click. New affiliates do not get renewal commissions. Custom payouts are possible for high performers.
ExpressVPNexpressvpn.comVPN/security · in-house, Impact and CJ
ExpressVPN's official page does not publish rates. Third-party listings show $13 to $36 per sale by plan length with no renewals. Third-party sources list the cookie anywhere from 30 to 90 days, so we mark it unclear. Confirm in your dashboard after approval.
IPVanishipvanish.comVPN/security · Tune and CJ
The official page mentions industry-leading CPAs on new sales but no figures. The 50% rate and 45-day cookie are third-party figures from network listings. Confirm in your dashboard after approval.
Mostly no. NordVPN, Surfshark, ExpressVPN, CyberGhost, Private Internet Access and IPVanish pay on your own referrals only. Two are the exception: PureVPN lists a two-tier program on its affiliate page, and Proton VPN pays an official 10% second tier. PureVPN's exact rate is not published, third-party listings put it around 10%. Confirm PureVPN's rate in the dashboard after approval.
A CPA pays a fixed amount once. Revshare pays a percentage of the sale and, in recurring programs, of each renewal too. Here is an example with a $60 yearly plan:
| Per customer | Year 1 | After year 2 | After year 3 |
|---|---|---|---|
| $36 one-time CPA | $36 | $36 | $36 |
| 40% new + 35% renewals | $24 | $45 | $66 |
The CPA wins in year one. Revshare passes it once a customer renews once. The $60 price is an example, not a quote from any provider. Plug in your own numbers, and recruits for a second tier, with the 2-tier income calculator.
On first sales, PureVPN, NordVPN and Proton VPN pay 100% of a new monthly plan and 40% of longer plans. Over time, PureVPN's 35% lifetime renewal rate pays the most of the official figures.
PureVPN (35% lifetime), NordVPN (30% on renewals), Proton VPN (30% of renewals) and Private Internet Access (up to 33% lifetime) pay on renewals. Surfshark, ExpressVPN and IPVanish pay on new sales only.
Yes. PureVPN and Proton VPN both run two-tier programs; PureVPN's rate, around 10%, is a third-party figure, while Proton's 10% is official. NordVPN, Surfshark, ExpressVPN, CyberGhost, PIA and IPVanish are single-tier.
A CPA pays more on day one. Revshare usually wins if your readers keep their subscription for a second year or longer, because every renewal pays again.