Choose the best plan for your business needs. All plans include free malware protection
Enjoy a 14-day risk-free trial
Lite
Essential internet access security with basic internet threat prevention features.
$8
USER/ MONTH
SAVE 20%
TOP CHOICE
Core
A suite of advanced internet access security & basic network access control solutions.
$11
USER/ MONTH
SAVE 21%
Premium
A powerful blend of network access control solutions with more granular network segmentation and the ability to interconnect sites & devices.
$14
USER/ MONTH
SAVE 22%
Enterprise offer
Custom-fit network security for teams over 200 seats, offering clarity & flexible pricing.
From
$6
USER/ MONTH
With Lite plan
VAT, sales tax, or other mandatory tax applicable to your purchase in your country will be calculated additionally.
Secure your clients with ease
Join NordLayer Partner Program - add our network access security solution to your portfolio. Protect your clients and boost your revenue effortlessly.
Managed Service Provider (MSP)
Managed Security Service Provider (MSSP)
Reseller
| Features | Lite |
|---|---|
Network security | |
Server performance Our servers use only the latest hardware components that can sustain the increased load. | up to 1 Gbps |
Shared Gateway locations Safely access the internet through various VPN locations. | 40+ countries |
Virtual Private Gateway locations Create virtual private gateways with dedicated IP addresses in various locations across the globe. | Not included |
Server with Dedicated IP Hide resources from network outsiders by creating a Virtual Private Gateway, which will be accessible to your organization's users exclusively. | Not included |
IP allowlisting Allow only greenlighted IP addresses to connect to your organization’s network. | Not included |
Cloud Firewall (FWaaS) Provide granular network segmentation & advanced resource access control. | Not included |
Device Posture Security Restrict non-compliant devices from accessing the network according to predefined rules. | Not included |
Session Duration Controls Set automatic logout times for users after a set duration, enhancing security and control. | Included |
Split tunneling Choose Include or Exclude option to control which addresses and IPs go through the tunnel and which bypass it. | Not included |
Internet access security | |
Download Protection Detect and remove malware from newly downloaded files.new | Included |
Web Protection Automated detection and blocking malicious domains based on threat intelligence feeds. | Included |
VPN protocol variety Secure your network with three different VPN protocols: NordLynx, OpenVPN (UDP), and OnepVPN (TCP). | Included |
NordLynx VPN protocol A new-generation, WireGuard-based VPN protocol with improved performance, faster speeds, and better security measures than other VPNs. | Included |
DNS Filtering by category Choose from 50+ website categories to block while your team members are connected to Virtual Private Gateway. | Not included |
Custom DNS Route traffic over your own or 3rd party DNS service. | Not included |
Application Blocker Choose from 400+ applications, services, and protocols to block while connected to Virtual Private Gateway. | Not included |
URL-based split tunneling (Browser Extension only) Configure specific exceptions to bypass a VPN tunnel. | Not included |
Network connectors | |
Multi-platform app support Use our application with Windows, MacOS, Android, iOS, and Linux. | Included |
Devices per license Login to Nordlayer account from multiple desktop & mobile devices. | 6 |
Manual configuration Manually configure Nordlayer on devices that don't support the usual OS. | Not included |
Site-to-Site connector Connect your business network to remote sites with secure, encrypted tunnels via a Virtual Private Gateway. | Not included |
Cloud LAN Share files endpoint-to-endpoint when multiple user devices are connected to NordLayer. | Not included |
Browser Extension Secure your internet and cloud resources access on a browser level only. | Not included |
User authorization & management | |
Multi-factor authentication Ensure an additional protection layer when logging into applications or the Control Panel. | Included |
Biometrics Implement an additional security layer through face recognition and fingerprint scanning when connecting to Virtual Private Gateways. | Not included |
Always On VPN Ensure a VPN-only connection to your organization's digital resources and online browsing. | Included |
Auto-connect Automatically connect to a selected VPN gateway when an internet connection is established. | Included |
SSO Use unified one-click login with SSO providers: Okta, Entra ID, OneLogin, Google and JumpCloud SSO. | Included |
User provisioning Automate your user onboarding and offboarding with Microsoft Entra ID and Okta. | |
Visibility | |
Activity monitoring reports Monitor how and when your users and devices connect to shared and Virtual Private Gateways. | Included |
Device posture monitoring Monitor devices that connect to shared & Virtual Private Gateways and get notified about untrusted ones. | |
Dashboards Interactive dashboards with detailed data about network. | Included |
Integrations | |
Built-in integrations Connect NordLayer with tools like SentinelOne for automated threat response and Jamf Cloud for streamlined macOS app deployment. | Included |
Custom integrations Use real-time alerts from your preferred security tools to disconnect users or devices instantly and contain threats. | Included |
Platform | |
Dark web monitoring Monitor and get notified about your company data leaked in the deep and dark web. | |
Password manager Password vault for business that helps generate, store, and manage strong passwords. | |
Support | |
24/7 tech-minded live chat/email support Get first line customer support in under one minute. Escalate urgent issues to technical support engineers. | Included |
Dedicated account manager A Dedicated Account Manager is assigned with the purchase of 30 licenses or more. | Not included |
Technical solution architect Get help in planning & designing our solution's setup according to your infrastructure & company needs. | Not included |
Partners | |
CrowdStrike Falcon® Go AI-powered endpoint and mobile security protecting devices from malware, ransomware, and common cyber threats.Add-on | $2 device/month |
CrowdStrike Falcon® Enterprise AI-powered endpoint and mobile security with integrated firewall protecting devices from advanced threats with detection, investigation, and response capabilities.Add-on | $9 device/month |
| Features | Core |
|---|---|
Network security | |
Server performance Our servers use only the latest hardware components that can sustain the increased load. | up to 1 Gbps |
Shared Gateway locations Safely access the internet through various VPN locations. | 40+ countries |
Virtual Private Gateway locations Create virtual private gateways with dedicated IP addresses in various locations across the globe. | 40+ countries |
Dedicated IP Hide resources from network outsiders by creating a Virtual Private Gateway, which will be accessible to your organization's users exclusively. | Included |
IP allowlisting Allow only greenlighted IP addresses to connect to your organization’s network. | Included |
Cloud Firewall (FWaaS) Provide granular network segmentation & advanced resource access control. | |
Device Posture Security Restrict non-compliant devices from accessing the network according to predefined rules. | |
Session Duration Controls Set automatic logout times for users after a set duration, enhancing security and control. | Included |
Split tunneling Choose Include or Exclude option to control which addresses and IPs go through the tunnel and which bypass it. | Included |
Internet access security | |
Download Protection Detect and remove malware from newly downloaded files.new | Included |
Web Protection Automated detection and blocking malicious domains based on threat intelligence feeds. | Included |
VPN protocol variety Secure your network with three different VPN protocols: NordLynx, OpenVPN (UDP), and OnepVPN (TCP). | Included |
NordLynx VPN protocol A new-generation, WireGuard-based VPN protocol with improved performance, faster speeds, and better security measures than other VPNs. | Included |
DNS Filtering by category Choose from 50+ website categories to block while your team members are connected to Virtual Private Gateway. | Included |
Custom DNS Route traffic over your own or 3rd party DNS service. | Included |
Application Blocker Choose from 400+ applications, services, and protocols to block while connected to Virtual Private Gateway. | Included |
URL-based split tunneling (Browser Extension only) Configure specific exceptions to bypass a VPN tunnel. | Not included |
Network connectors | |
Multi-platform app support Use our application with Windows, MacOS, Android, iOS, and Linux. | Included |
Devices per license Login to Nordlayer account from multiple desktop & mobile devices. | 6 |
Manual configuration Manually configure Nordlayer on devices that don't support the usual OS. | Included |
Site-to-Site connector Connect your business network to remote sites with secure, encrypted tunnels via a Virtual Private Gateway. | Not included |
Cloud LAN Share files endpoint-to-endpoint when multiple user devices are connected to NordLayer. | Not included |
Browser Extension Secure your internet and cloud resources access on a browser level only. | Not included |
User authorization & management | |
Multi-factor authentication Ensure an additional protection layer when logging into applications or the Control Panel. | Included |
Biometrics Implement an additional security layer through face recognition and fingerprint scanning when connecting to Virtual Private Gateways. | Included |
Always On VPN Ensure a VPN-only connection to your organization's digital resources and online browsing. | Included |
Auto-connect Automatically connect to a selected VPN gateway when an internet connection is established. | Included |
SSO Use unified one-click login with SSO providers: Okta, Entra ID, OneLogin, Google and JumpCloud SSO. | Included |
User provisioning Automate your user onboarding and offboarding with Microsoft Entra ID and Okta. | |
Visibility | |
Activity monitoring reports Monitor how and when your users and devices connect to shared and Virtual Private Gateways. | Included |
Device posture monitoring Monitor devices that connect to shared & Virtual Private Gateways and get notified about untrusted ones. | Included |
Dashboards Interactive dashboards with detailed data about network. | Included |
Integrations | |
Built-in integrations Connect NordLayer with tools like SentinelOne for automated threat response and Jamf Cloud for streamlined macOS app deployment. | Included |
Custom integrations Use real-time alerts from your preferred security tools to disconnect users or devices instantly and contain threats. | Included |
Platform | |
Dark web monitoring Monitor and get notified about your company data leaked in the deep and dark web. | |
Password manager Password vault for business that helps generate, store, and manage strong passwords. | |
Support | |
24/7 tech-minded live chat/email support Get first line customer support in under one minute. Escalate urgent issues to technical support engineers. | Included |
Dedicated account manager A Dedicated Account Manager is assigned with the purchase of 30 licenses or more. | Included |
Technical solution architect Get help in planning & designing our solution's setup according to your infrastructure & company needs. | Not included |
Partners | |
CrowdStrike Falcon® Go AI-powered endpoint and mobile security protecting devices from malware, ransomware, and common cyber threats.add-on | $2 device/month |
CrowdStrike Falcon® Enterprise AI-powered endpoint and mobile security with integrated firewall protecting devices from advanced threats with detection, investigation, and response capabilities.add-on | $9 device/month |
| Features | Premium |
|---|---|
Network security | |
Server performance Our servers use only the latest hardware components that can sustain the increased load. | up to 1 Gbps |
Shared Gateway locations Safely access the internet through various VPN locations. | 40+ countries |
Virtual Private Gateway locations Create virtual private gateways with dedicated IP addresses in various locations across the globe. | 40+ countries |
Server with Dedicated IP Hide resources from network outsiders by creating a Virtual Private Gateway, which will be accessible to your organization's users exclusively. | Included |
IP allowlisting Allow only greenlighted IP addresses to connect to your organization’s network. | Included |
Cloud Firewall (FWaaS) Provide granular network segmentation & advanced resource access control. | Included |
Device Posture Security Restrict non-compliant devices from accessing the network according to predefined rules. | Included |
Session Duration Controls Set automatic logout times for users after a set duration, enhancing security and control. | Included |
Split tunneling Choose Include or Exclude option to control which addresses and IPs go through the tunnel and which bypass it. | Included |
Internet access security | |
Download Protection Detect and remove malware from newly downloaded files.new | Included |
Web Protection Automated detection and blocking malicious domains based on threat intelligence feeds. | Included |
VPN protocol variety Secure your network with three different VPN protocols: NordLynx, OpenVPN (UDP), and OnepVPN (TCP). | Included |
NordLynx VPN protocol A new-generation, WireGuard-based VPN protocol with improved performance, faster speeds, and better security measures than other VPNs. | Included |
DNS Filtering by category Choose from 50+ website categories to block while your team members are connected to Virtual Private Gateway. | Included |
Custom DNS Route traffic over your own or 3rd party DNS service. | Included |
Application Blocker Choose from 400+ applications, services, and protocols to block while connected to Virtual Private Gateway. | Included |
URL-based split tunneling (Browser Extension only) Configure specific exceptions to bypass a VPN tunnel. | Included |
Network connectors | |
Multi-platform app support Use our application with Windows, MacOS, Android, iOS, and Linux. | Included |
Devices per license Login to Nordlayer account from multiple desktop & mobile devices. | 6 |
Manual configuration Manually configure Nordlayer on devices that don't support the usual OS. | Included |
Site-to-Site connector Connect your business network to remote sites with secure, encrypted tunnels via a Virtual Private Gateway. | Included |
Cloud LAN Share files endpoint-to-endpoint when multiple user devices are connected to NordLayer. | Included |
Browser Extension Secure your internet and cloud resources access on a browser level only. | Included |
User authorization & management | |
Multi-factor authentication Ensure an additional protection layer when logging into applications or the Control Panel. | Included |
Biometrics Implement an additional security layer through face recognition and fingerprint scanning when connecting to Virtual Private Gateways. | Included |
Always On VPN Ensure a VPN-only connection to your organization's digital resources and online browsing. | Included |
Auto-connect Automatically connect to a selected VPN gateway when an internet connection is established. | Included |
SSO Use unified one-click login with SSO providers: Okta, Entra ID, OneLogin, Google and JumpCloud SSO. | Included |
User provisioning Automate your user onboarding and offboarding with Microsoft Entra ID and Okta. | Included |
Visibility | |
Activity monitoring reports Monitor how and when your users and devices connect to shared and Virtual Private Gateways. | Included |
Device posture monitoring Monitor devices that connect to shared & Virtual Private Gateways and get notified about untrusted ones. | Included |
Dashboards Interactive dashboards with detailed data about network. | Included |
Integrations | |
Built-in integrations Connect NordLayer with tools like SentinelOne for automated threat response and Jamf Cloud for streamlined macOS app deployment. | Included |
Custom integrations Use real-time alerts from your preferred security tools to disconnect users or devices instantly and contain threats. | Included |
Platform | |
Dark web monitoring Monitor and get notified about your company data leaked in the deep and dark web. | |
Password manager Password vault for business that helps generate, store, and manage strong passwords. | |
Support | |
24/7 tech-minded live chat/email support Get first line customer support in under one minute. Escalate urgent issues to technical support engineers. | priority |
Dedicated account manager A Dedicated Account Manager is assigned with the purchase of 30 licenses or more. | Included |
Technical solution architect Get help in planning & designing our solution's setup according to your infrastructure & company needs. | Not included |
Partners | |
CrowdStrike Falcon® Go AI-powered endpoint and mobile security protecting devices from malware, ransomware, and common cyber threats.Add-on | $2 device/month |
CrowdStrike Falcon® Enterprise AI-powered endpoint and mobile security with integrated firewall protecting devices from advanced threats with detection, investigation, and response capabilities.Add-on | $9 device/month |
| Features | Enterprise offer |
|---|---|
Network security | |
Server performance Our servers use only the latest hardware components that can sustain the increased load. | up to 1 Gbps |
Shared Gateway locations Safely access the internet through various VPN locations. | 40+ countries |
Virtual Private Gateway locations Create virtual private gateways with dedicated IP addresses in various locations across the globe. | up to 60 countries |
Server with Dedicated IP Hide resources from network outsiders by creating a Virtual Private Gateway, which will be accessible to your organization's users exclusively. | custom |
IP allowlisting Allow only greenlighted IP addresses to connect to your organization’s network. | custom |
Cloud Firewall (FWaaS) Provide granular network segmentation & advanced resource access control. | custom |
Device Posture Security Restrict non-compliant devices from accessing the network according to predefined rules. | custom |
Session Duration Controls Set automatic logout times for users after a set duration, enhancing security and control. | Included |
Split tunneling Choose Include or Exclude option to control which addresses and IPs go through the tunnel and which bypass it. | Included |
Internet access security | |
Download Protection Detect and remove malware from newly downloaded files.new | Included |
Web Protection Automated detection and blocking malicious domains based on threat intelligence feeds. | Included |
VPN protocol variety Secure your network with three different VPN protocols: NordLynx, OpenVPN (UDP), and OnepVPN (TCP). | Included |
NordLynx VPN protocol A new-generation, WireGuard-based VPN protocol with improved performance, faster speeds, and better security measures than other VPNs. | Included |
DNS Filtering by category Choose from 50+ website categories to block while your team members are connected to Virtual Private Gateway. | custom |
Custom DNS Route traffic over your own or 3rd party DNS service. | custom |
Application Blocker Choose from 400+ applications, services, and protocols to block while connected to Virtual Private Gateway. | custom |
URL-based split tunneling (Browser Extension only) Configure specific exceptions to bypass a VPN tunnel. | custom |
Network connectors | |
Multi-platform app support Use our application with Windows, MacOS, Android, iOS, and Linux. | Included |
Devices per license Login to Nordlayer account from multiple desktop & mobile devices. | 6 |
Manual configuration Manually configure Nordlayer on devices that don't support the usual OS. | custom |
Site-to-Site connector Connect your business network to remote sites with secure, encrypted tunnels via a Virtual Private Gateway. | custom |
Cloud LAN Share files endpoint-to-endpoint when multiple user devices are connected to NordLayer. | custom |
Browser Extension Secure your internet and cloud resources access on a browser level only. | custom |
User authorization & management | |
Multi-factor authentication Ensure an additional protection layer when logging into applications or the Control Panel. | Included |
Biometrics Implement an additional security layer through face recognition and fingerprint scanning when connecting to Virtual Private Gateways. | custom |
Always On VPN Ensure a VPN-only connection to your organization's digital resources and online browsing. | Included |
Auto-connect Automatically connect to a selected VPN gateway when an internet connection is established. | Included |
SSO Use unified one-click login with SSO providers: Okta, Entra ID, OneLogin, Google and JumpCloud SSO. | Included |
User provisioning Automate your user onboarding and offboarding with Microsoft Entra ID and Okta. | custom |
Visibility | |
Activity monitoring reports Monitor how and when your users and devices connect to shared and Virtual Private Gateways. | Included |
Device posture monitoring Monitor devices that connect to shared & Virtual Private Gateways and get notified about untrusted ones. | custom |
Dashboards Interactive dashboards with detailed data about network. | custom |
Integrations | |
Built-in integrations Connect NordLayer with tools like SentinelOne for automated threat response and Jamf Cloud for streamlined macOS app deployment. | Included |
Custom integrations Use real-time alerts from your preferred security tools to disconnect users or devices instantly and contain threats. | Included |
Platform | |
Dark web monitoring Monitor and get notified about your company data leaked in the deep and dark web. | |
Password manager Password vault for business that helps generate, store, and manage strong passwords. | |
Support | |
24/7 tech-minded live chat/email support Get first line customer support in under one minute. Escalate urgent issues to technical support engineers. | Premium |
Dedicated account manager A Dedicated Account Manager is assigned with the purchase of 30 licenses or more. | custom |
Technical solution architect Get help in planning & designing our solution's setup according to your infrastructure & company needs. | custom |
Partners | |
CrowdStrike Falcon® Go AI-powered endpoint and mobile security protecting devices from malware, ransomware, and common cyber threats.NEW | |
CrowdStrike Falcon® Enterprise AI-powered endpoint and mobile security with integrated firewall protecting devices from advanced threats with detection, investigation, and response capabilities.NEW | |
register & set up
3 simple steps to protect your business network from cyber threats
Set up NordLayer in less than 10 minutes & start protecting your team today!
14-days money-back guarantee
Sign up
Follow a few quick & easy steps to create an account for your organization and receive access to our Control Panel.
Explore
Get a feel of our intuitive platform: try setting up teams, gateways, and see all capabilities. The best part? All of this is completely free!
Choose your plan
After browsing the Control Panel, activate your subscription by purchasing the most suitable pricing plan and start protecting your network!
CREDIBILITY
Trusted by leading companies worldwide
In Security Service Edge category
NordLayer has been very accommodating in terms of our needs. They are flexible to cater timing of payments and also providing exclusive support
Everything is super efficient and easy: negociations, setup, dashboard, accounting, support
Very easy to set up and use and is very reliable. There are good security options to enable the configuration comply with security policies.
NordLayer in numbers
15,000+
Businesses protected
10 min
Average time to deploy
40+
Global service locations

Ready to leave cyber threats behind?
Step forward with our 14-day money-back guarantee. No strings attached, just security that speaks for itself.
14-days money-back guarantee
SECURITY & COMPLIANCE
Your data security is our #1 priority
As part of Nord Security, it’s in our DNA to ensure compliance and data security best practices are always in place. Our information security management systems are certified according to ISO 27001 and offer powerful AES-256 or ChaCha20 encryption types. Also, our information security policies and procedures meet the SOC 2 Type I compliance requirements and the objectives outlined in the HIPAA Security Rules. It means that NordLayer is HIPAA-compliant and has the appropriate measures for securing access to Protected Health Information.

ADDITIONAL INFO
Frequently asked questions
You can pay by bank transfer or credit card. We accept Visa, Mastercard, American Express, and Discover.
You can upgrade your NordLayer plan anytime, and it only takes a few steps. Just go to the Control Panel and choose the upgrade you want.
You can add as many user accounts as you need at any time. Charges for any additional licenses will be prorated based on your initial contract with NordLayer.
The billing frequency for NordLayer services is completely up to you. You can choose whether your organization is billed monthly or once per year, with the annual plan costing less.
Yes. There’s no need to worry about purchasing additional licenses any time your organization experiences personnel changes. You can simply transfer the user account that is no longer in use to a new employee.
Yes. Just fill in a contact form and we will get back to you shortly.
We understand the importance of flexibility and peace of mind for our customers. If you're unsatisfied with NordLayer, you can cancel your subscription within 14 days of purchase for a full refund, no questions asked. This policy ensures you can experience our services worry-free.
LET'S TALK
Is there anything else you’d like to ask us?
Feel free to reach out for any cyber security help you might need!