The standout addition is Threat Protection Pro, which moves beyond basic domain filtering to deliver system-wide defense against modern online hazards. Additionally, IPVanish offers a standard Threat Protection tier (DNS filtering) across all its apps, including iOS, Android and Fire TV. That said, while the native desktop app requires an active VPN, Surfshark’s CleanWeb 2.0 browser extension does work offline (without an active VPN tunnel) to block web ads and cookie pop-ups. It provides simple ad and malicious-site blocking inside the active VPN tunnel, keeping public Wi-Fi connections cleaner. Best For: Windows users who want an easy-install ad utility.