{
  "schema_version": 1,
  "checked_on": "2026-11-07",
  "basis": "Curated provider-stated inclusions, not installed-product testing, a complete bundle market survey or a security ranking.",
  "roles": [
    {
      "id": "vpn",
      "name": "A managed public VPN exit",
      "icon": "tunnel",
      "job": "Route intended traffic through a managed VPN endpoint.",
      "boundary": "It does not manage passwords, remove public records or erase account identity.",
      "free_path": "For authorized private network access, a free client and your own gateway may be the appropriate path instead.",
      "free_url": "/software/"
    },
    {
      "id": "dns",
      "name": "Independent DNS filtering",
      "icon": "globe",
      "job": "Choose and manage a filtering resolver for supported domain lookups.",
      "boundary": "A VPN’s built-in domain blocker may overlap, but may not supply a separately usable DNS account, controls or the same device coverage.",
      "free_path": "AdGuard has public DNS and a Starter option; paid Personal capacity is separate.",
      "free_url": "/privacy-tools/adguard-dns/"
    },
    {
      "id": "blocking",
      "name": "Ad and tracker filtering",
      "icon": "shield",
      "job": "Reduce supported ad/tracker requests on the surfaces a filter can cover.",
      "boundary": "Domain filtering, a browser extension and a local application filter have different limits. None guarantees every advert is removed.",
      "free_path": "A free browser extension may be sufficient for a browser-only task; it is not the paid cross-platform license.",
      "free_url": "/privacy-tools/adguard-ad-blocker/"
    },
    {
      "id": "passwords",
      "name": "Password and account storage",
      "icon": "key",
      "job": "Store and generate credentials; inspect recovery, sharing and device limits.",
      "boundary": "A VPN or alternative email identity is not a password vault. Check the exact included edition before buying another manager.",
      "free_path": "Proton Pass and NordPass have free tiers. Use a current manager that already fits before considering another paid subscription.",
      "free_url": "/privacy-tools/#passwords"
    },
    {
      "id": "removal",
      "name": "Personal-data broker removal",
      "icon": "document",
      "job": "Request removal from supported brokers with your authorization.",
      "boundary": "A breach alert, antivirus or alternate email address is not an ongoing removal service. Geography, identity checks and supported brokers matter.",
      "free_path": "You can also consider direct broker opt-out requests; no purchase is required to read the removal dossier and its limits.",
      "free_url": "/privacy-tools/incogni/"
    }
  ],
  "bundles": [
    {
      "id": "proton-vpn-plus",
      "provider": "protonvpn",
      "name": "Proton VPN Plus",
      "covered": {
        "vpn": "The named plan supplies the managed VPN role."
      },
      "partial": {
        "dns": "Built-in domain/ad filtering overlaps some filtering goals, but is not treated here as an equivalent independent DNS service or full local ad-blocker license.",
        "blocking": "Built-in domain/ad filtering overlaps some filtering goals, but is not treated here as an equivalent independent DNS service or full local ad-blocker license."
      },
      "note": "VPN Plus is separate from Unlimited; do not infer paid Pass Plus from the VPN-only price. Free Pass features may still be available.",
      "source_ids": [
        "proton-unlimited",
        "proton-netshield"
      ],
      "price_status": "Not captured for this planner. Base VPN offer prices do not carry over to this bundle."
    },
    {
      "id": "proton-unlimited",
      "provider": "protonvpn",
      "name": "Proton Unlimited",
      "covered": {
        "vpn": "Proton documents VPN Plus within Unlimited.",
        "passwords": "Proton documents Pass Plus within Unlimited. Check the existing account before buying Pass Plus separately."
      },
      "partial": {
        "dns": "Built-in domain/ad filtering overlaps some filtering goals, but is not treated here as an equivalent independent DNS service or full local ad-blocker license.",
        "blocking": "Built-in domain/ad filtering overlaps some filtering goals, but is not treated here as an equivalent independent DNS service or full local ad-blocker license."
      },
      "note": "This is the multi-product Unlimited subscription, not the VPN Plus offer in the VPN directory.",
      "source_ids": [
        "proton-unlimited",
        "proton-netshield"
      ],
      "price_status": "Not captured for this planner. Base VPN offer prices do not carry over to this bundle."
    },
    {
      "id": "nord-basic",
      "provider": "nordvpn",
      "name": "NordVPN Basic",
      "covered": {
        "vpn": "The Basic package supplies the managed VPN role."
      },
      "partial": {
        "blocking": "Nord describes basic scam/phishing and domain/ad blocking while connected. That does not establish the same coverage as a local ad blocker."
      },
      "note": "The current bundle explanation places NordPass in higher named bundles. Regional and legacy account packages can differ; use the account’s exact plan.",
      "source_ids": [
        "nord-bundles"
      ],
      "price_status": "Not captured for this planner. Base VPN offer prices do not carry over to this bundle."
    },
    {
      "id": "nord-complete",
      "provider": "nordvpn",
      "name": "NordVPN Complete",
      "covered": {
        "vpn": "The Complete package includes the VPN.",
        "passwords": "Nord’s current Complete description includes NordPass. Confirm its edition, activation and account limits before another paid vault purchase."
      },
      "partial": {
        "blocking": "The suite includes filtering/security functions; supported platforms and coverage differ from a separate local ad blocker."
      },
      "note": "Current regional names differ. This does not map Prime, Ultra, Ultimate Max or legacy Plus to an assumed identical bundle.",
      "source_ids": [
        "nord-bundles"
      ],
      "price_status": "Not captured for this planner. Base VPN offer prices do not carry over to this bundle."
    },
    {
      "id": "surf-one",
      "provider": "surfshark",
      "name": "Surfshark One",
      "covered": {
        "vpn": "Surfshark describes the VPN as part of One."
      },
      "partial": {
        "blocking": "The suite offers ad/tracker filtering on supported surfaces; check its exact app/extension controls before assuming it replaces another filter."
      },
      "note": "Antivirus, breach alerts and Alternative ID are different roles from password storage and broker removal. No paid password-vault inclusion is established here.",
      "source_ids": [
        "surf-one"
      ],
      "price_status": "Not captured for this planner. Base VPN offer prices do not carry over to this bundle."
    },
    {
      "id": "surf-one-plus",
      "provider": "surfshark",
      "name": "Surfshark One+",
      "covered": {
        "vpn": "Surfshark describes One+ as a VPN bundle.",
        "removal": "Surfshark says Incogni is part of One+. Confirm supported country, activation and the existing subscription’s exact removal scope."
      },
      "partial": {
        "blocking": "The suite’s supported filtering functions may overlap; platform and surface coverage must still match."
      },
      "note": "An Incogni entitlement can overlap a separate Incogni purchase. Eligibility and removal results are not guaranteed by the bundle name.",
      "source_ids": [
        "surf-one",
        "surf-incogni"
      ],
      "price_status": "Not captured for this planner. Base VPN offer prices do not carry over to this bundle."
    }
  ],
  "sources": [
    {
      "id": "proton-unlimited",
      "title": "Proton: Pass editions and Unlimited inclusions",
      "url": "https://proton.me/support/proton-pass-plans-explained",
      "checked_on": "2026-11-07"
    },
    {
      "id": "proton-netshield",
      "title": "Proton: NetShield filtering scope",
      "url": "https://protonvpn.com/support/netshield",
      "checked_on": "2026-11-07"
    },
    {
      "id": "nord-bundles",
      "title": "NordVPN: current named and regional bundles",
      "url": "https://nordvpn.com/blog/nordvpn-bundle-explained/",
      "checked_on": "2026-11-07"
    },
    {
      "id": "surf-one",
      "title": "Surfshark One: supported suite roles",
      "url": "https://surfshark.com/one",
      "checked_on": "2026-11-07"
    },
    {
      "id": "surf-incogni",
      "title": "Surfshark: Incogni is included in One+",
      "url": "https://surfshark.com/incogni",
      "checked_on": "2026-11-07"
    },
    {
      "id": "nord-program",
      "title": "NordVPN affiliate program",
      "url": "https://nordvpn.com/affiliate/",
      "checked_on": "2026-11-07"
    },
    {
      "id": "surf-program",
      "title": "Surfshark affiliate program",
      "url": "https://surfshark.com/affiliate",
      "checked_on": "2026-11-07"
    },
    {
      "id": "proton-program",
      "title": "Proton affiliate program",
      "url": "https://proton.me/partners/affiliates",
      "checked_on": "2026-11-07"
    }
  ]
}