A VPN, DNS resolver, blocker, password vault and removal service handle different jobs. Match your gaps to the exact bundle you own before adding another subscription.
Choices and budget stay in this page’s memory. They are not saved, added to the URL or sent anywhere. Reload or reset to clear them. This is a role check, not a security assessment or a package-price calculator.
Your role and overlap check.
A managed public VPN exit
Role boundary: It does not manage passwords, remove public records or erase account identity.
Role boundary: A breach alert, antivirus or alternate email address is not an ongoing removal service. Geography, identity checks and supported brokers matter.
Options are selected products with available paid affiliate programs; this is limited commercial coverage. No affiliate tracking is configured. Provider inclusions are attributed statements, not our installed-product tests. Confirm the exact edition, activation, country eligibility, devices and current checkout before any purchase. How this site is funded.
Keep the roles separate.
A managed public VPN exit: Route intended traffic through a managed VPN endpoint. It does not manage passwords, remove public records or erase account identity.
Independent DNS filtering: Choose and manage a filtering resolver for supported domain lookups. A VPN’s built-in domain blocker may overlap, but may not supply a separately usable DNS account, controls or the same device coverage.
Ad and tracker filtering: Reduce supported ad/tracker requests on the surfaces a filter can cover. Domain filtering, a browser extension and a local application filter have different limits. None guarantees every advert is removed.
Password and account storage: Store and generate credentials; inspect recovery, sharing and device limits. A VPN or alternative email identity is not a password vault. Check the exact included edition before buying another manager.
Personal-data broker removal: Request removal from supported brokers with your authorization. A breach alert, antivirus or alternate email address is not an ongoing removal service. Geography, identity checks and supported brokers matter.
Selected current provider descriptions, checked 2026-11-07. Regional, legacy and account-specific editions may differ. Bundle inclusions do not inherit the price of the base VPN tier. No bundle discount or savings claim is calculated.
Proton VPN Plus
Included roles: The named plan supplies the managed VPN role.
VPN Plus is separate from Unlimited; do not infer paid Pass Plus from the VPN-only price. Free Pass features may still be available.
Partial overlap: Built-in domain/ad filtering overlaps some filtering goals, but is not treated here as an equivalent independent DNS service or full local ad-blocker license. Built-in domain/ad filtering overlaps some filtering goals, but is not treated here as an equivalent independent DNS service or full local ad-blocker license.
Not captured for this planner. Base VPN offer prices do not carry over to this bundle.
Included roles: Proton documents VPN Plus within Unlimited.; Proton documents Pass Plus within Unlimited. Check the existing account before buying Pass Plus separately.
This is the multi-product Unlimited subscription, not the VPN Plus offer in the VPN directory.
Partial overlap: Built-in domain/ad filtering overlaps some filtering goals, but is not treated here as an equivalent independent DNS service or full local ad-blocker license. Built-in domain/ad filtering overlaps some filtering goals, but is not treated here as an equivalent independent DNS service or full local ad-blocker license.
Not captured for this planner. Base VPN offer prices do not carry over to this bundle.
Included roles: The Basic package supplies the managed VPN role.
The current bundle explanation places NordPass in higher named bundles. Regional and legacy account packages can differ; use the account’s exact plan.
Partial overlap: Nord describes basic scam/phishing and domain/ad blocking while connected. That does not establish the same coverage as a local ad blocker.
Not captured for this planner. Base VPN offer prices do not carry over to this bundle.
Included roles: The Complete package includes the VPN.; Nord’s current Complete description includes NordPass. Confirm its edition, activation and account limits before another paid vault purchase.
Current regional names differ. This does not map Prime, Ultra, Ultimate Max or legacy Plus to an assumed identical bundle.
Partial overlap: The suite includes filtering/security functions; supported platforms and coverage differ from a separate local ad blocker.
Not captured for this planner. Base VPN offer prices do not carry over to this bundle.
Included roles: Surfshark describes the VPN as part of One.
Antivirus, breach alerts and Alternative ID are different roles from password storage and broker removal. No paid password-vault inclusion is established here.
Partial overlap: The suite offers ad/tracker filtering on supported surfaces; check its exact app/extension controls before assuming it replaces another filter.
Not captured for this planner. Base VPN offer prices do not carry over to this bundle.
Included roles: Surfshark describes One+ as a VPN bundle.; Surfshark says Incogni is part of One+. Confirm supported country, activation and the existing subscription’s exact removal scope.
An Incogni entitlement can overlap a separate Incogni purchase. Eligibility and removal results are not guaranteed by the bundle name.
Partial overlap: The suite’s supported filtering functions may overlap; platform and surface coverage must still match.
Not captured for this planner. Base VPN offer prices do not carry over to this bundle.