How AI Search Is Recommending VPN Services: Monthly Trends

Executive Summary

The VPN Services category was quiet in August 2026. Proton VPN led valid recommendation coverage at 80.7%, down 3.2 points from 83.9% in July, with NordVPN close behind at 77.1% (down 3.0 points from 80.1%). No brand moved beyond normal month-to-month variation, and the category held a stable competitive structure with the same leader for a second consecutive month.

Windscribe was the only brand to gain coverage, rising 1.7 points to 27.6% from 25.9% in July, though the move stayed within normal variation. ExpressVPN saw the sharpest absolute decline, down 3.6 points to 67.4% from 71.0%, also within normal bounds. The overall picture is broad, modest softening across the top tier rather than a single decisive shift.

Across the full series, Proton VPN has held the leadership position in both months, while the gap to second place narrowed from 3.8 points in July to 3.6 points in August. The category is marked by high presence rates across most tracked brands, with the meaningful differences showing up in how often each brand is actually recommended rather than simply mentioned.

Each monthly run begins with 800 prompt-surface observations (534 unique questions in July; 574 in August) across the benchmark's defined AI/search surface universe. Of those, 800 mentioned a tracked brand or competitor in both months; 798 were relevant and 2 were irrelevant in July, while all 800 were relevant in August. The public metrics use the 707 qualified observations in July and 709 in August that survive both qualification stages.

Key Findings

Benchmark Context

The report separates the raw collection universe from the qualified analysis set. Brand-level recommendation percentages are calculated within the qualified benchmark set.

The qualified benchmark observations in each column are the denominator used throughout the brand-level tables below.

Benchmark-Level Metrics

The recommendation-shaped answer share and valid recommendation shortlist share both edged lower in August, which suggests the qualified set carried slightly fewer structured recommendation formats than in July. The decline in the shortlist share is consistent with the broad softening in coverage rates across most brands in the same month.

AI Recommendation Trend

The competitive structure held steady in August with Proton VPN maintaining the leadership position, though the entire top tier eased lower in lockstep. No brand broke out of the pack, and no brand fell out of its established tier.

Recommendation Coverage by Brand

No single brand exceeded normal month-to-month variation in August. The category-level movement came from the combination of several smaller declines across the top tier, with only Windscribe moving against the prevailing direction.

What Changed This Month

Proton VPN: Leader Holds, Gap Narrows Slightly

Proton VPN remained the coverage leader at 80.7% in August, down 3.2 points from 83.9% in July. The decline was the second largest absolute move in the category but stayed below the significance threshold.

Presence remained strong at 95.8%, up 0.5 points from 95.3%, while top-three recommendation rate slipped 1.0 point to 45.4% from 46.4%. Rank-one rate held nearly flat at 14.8% versus 15.1%. Valid recommendation count was 572 out of 709 qualified observations, down from 593 out of 707.

The distinction to notice: Proton VPN's presence is nearly universal, but its lead now rests on being recommended frequently rather than on being the default first choice, where NordVPN holds a commanding 44.1% rank-one rate.

Highest-priority diagnostic: Which prompt patterns still place Proton VPN outside the top three, and which competitor takes the recommendation when it loses that position?

NordVPN: Strong Presence, Slipping Rank-One Position

NordVPN held second place at 77.1% coverage in August, down 3.0 points from 80.1% in July. Presence was essentially universal at 99.2%, up 0.2 points from 99.0%.

The sharper story is rank-one rate, which fell 3.1 points to 44.1% from 47.2% in July, while top-three rate slipped 1.2 points to 62.6% from 63.8%. Valid recommendation count was 547, down from 566. Despite the coverage decline, NordVPN still claims the default recommendation in nearly half of all qualified observations, with 313 rank-one placements.

The distinction to notice: NordVPN is mentioned in almost every response but is losing some first-position placements even as its top-three position holds relatively firm.

Highest-priority diagnostic: Which prompt types shifted away from NordVPN as the first recommendation, and what surfaced in its place?

ExpressVPN: Largest Absolute Decline

ExpressVPN saw the largest absolute coverage decline in August, down 3.6 points to 67.4% from 71.0% in July, though the move stayed below the significance threshold. Presence also slipped 1.6 points to 90.0% from 91.6%.

Top-three rate fell 3.1 points to 33.0% from 36.1%, while rank-one rate actually improved slightly, up 0.3 points to 7.8% from 7.5%. Valid recommendation count was 478, down from 502.

The distinction to notice: ExpressVPN is losing presence and top-three placement but holding its small share of first-position recommendations, suggesting its decline is about breadth of recommendation rather than loss of its highest-value spots.

Highest-priority diagnostic: Which prompts stopped recommending ExpressVPN altogether, and which brands absorbed those placements?

Windscribe: Only Riser

Windscribe was the only brand to gain coverage in August, up 1.7 points to 27.6% from 25.9% in July, though the move stayed below the significance threshold. Presence was essentially flat at 36.5% versus 36.8%.

Top-three rate slipped 0.8 points to 10.4% from 11.2%, and rank-one rate fell 0.6 points to 0.4% from 1.0%. Valid recommendation count was 196, up from 183. Net sentiment improved from 0.7 to 0.8.

The distinction to notice: Windscribe gained coverage while losing top-three and rank-one positions, meaning the additional recommendations are coming at lower placements rather than higher ones.

Highest-priority diagnostic: Which prompts newly included Windscribe in a recommendation list, and at what position did it appear?

Buyer-Intent Interpretation

All 709 qualified observations in August fell into the Brand Recommendation cluster, matching July's pattern where all 707 observations also landed there. The public benchmark therefore cannot yet answer questions about how pricing, value, or direct head-to-head comparisons influence which VPN brand AI systems recommend. The current evidence captures which brand is recommended, not why it wins on cost or comparison grounds.

Brand Opportunity Summary

The benchmark identifies where attention is warranted; a company-level analysis is needed to explain why these patterns are emerging.

Evidence Behind the Benchmark

The aggregate metrics are built from prompt-level observations (query, surface, recommendation outcome, rank, sentiment, and citations where exposed). Company-level analysis can go deeper into prompt, competitor, surface, and evidence patterns. Source presence is not automatically treated as proof of causation.

About This Benchmark

This report is part of the AI Market Discovery research program.

• AI Industry Market Discovery Methodology
• AI Industry Market Discovery Metrics
• AI Industry Market Discovery Standards

Report-Specific Interpretation Notes

• All ten brands were classified as stable in August, meaning no movement exceeded the significance threshold. The category-level softening came from the combination of several smaller declines.
• Brand-level percentages use the qualified benchmark set (709 observations in August), not the raw collection universe of 800 prompts.
• Directional analysis identifies movements worth investigating; it does not by itself establish the cause of those movements.
• Small absolute counts apply to lower-coverage brands such as IPVanish (51 valid recommendations), TunnelBear (88), and CyberGhost VPN (116). Interpret percentage movement for these brands with the counts in view.

Next Step

The Public Benchmark Shows Where a Brand Is Winning or Losing. A Company-Level Audit Shows Why.

The aggregate percentages raise questions that the benchmark alone cannot answer: which high-intent prompts is a brand winning or losing, which competitor takes the recommendation when a brand loses, what attributes do AI systems associate with each option, and which external sources shape those answers.

A company-specific AI visibility audit maps those prompt, surface, competitor, ranking, sentiment, and evidence-source patterns into a prioritized visibility strategy.

Request an AI visibility audit