Secure your network and browser
Observe and control your team's access, protect where they work, and scale security as you grow. Pick your plan and get set up in minutes. Risk-free for 14 days.
Lite
Start with the essentials. Protect your network and browser with basic threat prevention, visibility, and control features to secure your data as you scale.
$9
USER/ MONTH
SAVE MORE
TOP CHOICE
Core
Increase your control. Manage web traffic, strengthen access policies, and get deeper SaaS governance for your network and browser.
$13
USER/ MONTH
SAVE MORE
Premium
Scale your protection. Apply granular segmentation, zero-trust controls, and access management to your network and browser as your security demands grow.
$17
USER/ MONTH
SAVE MORE
Custom
Large organization with specific security requirements? Let’s build a solution around how your team actually operates.
Tailored pricing available
Payments are charged in USD. VAT, sales tax, or other mandatory tax applicable to your purchase in your country will be calculated additionally.
Your browser is your weakest link. Fix it.
NordLayer Browser gives IT teams full control over web activity, data movement, and access policies without touching endpoints.
Block unauthorized uploads, downloads, and copy-pasting at the source
Spot shadow IT across every site, web app, and extension before it becomes a breach
Enforce browser-level access policies across your workforce in minutes
Compare all plans
| Features | Lite |
|---|---|
Network & Browser Security | |
Server performance | up to 1 Gbps |
Virtual Private Gateway locations | Not included |
Web protection | Included |
Session Duration Controls | Included |
Server with Dedicated IP | Not included |
IP allowlisting | Not included |
Cloud Firewall (FWaaS) | Not included |
DNS Filtering by category | Not included |
Custom DNS | Not included |
Application Blocker | Not included |
IP anonymization | Not included |
Browser Firewall | Not included |
Site-to-Site connector | Not included |
URL-based split tunneling (Extension only) | Not included |
Browser DLP elements | |
Camera control | Included |
Microphone control | Included |
File download control | Included |
Clipboard control | Included |
Browser control | |
Browser traffic segmentation | Not included |
Policy-based routing | Not included |
Instant web access | Not included |
Browser secure tunneling | Not included |
Shadow IT management | |
Web activity monitoring | Included |
Browser extension management | Included |
Domain blocking | Included |
Activity Log | Included |
Network app only | |
Shared Gateway locations | 40+ countries |
Download Protection new | Included |
Auto-connect | Included |
VPN Protocol variety | Included |
Device Posture Security | Not included |
IP-based Split Tunneling | Not included |
Manual configuration | Not included |
Biometrics | Not included |
Cloud LAN | Not included |
Multi-platform app support | Included |
Browser extension | Not included |
User authorization & management | |
MFA | Included |
SSO | Included |
User provisioning | |
Devices per license | 6 |
Visibility | |
Activity monitoring reports | Included |
Device posture monitoring | |
Dashboards | Included |
Platform | |
Dark web monitoring | |
Password manager | |
Support | |
24/7 tech-minded live chat/email support | Included |
Dedicated account manager | Not included |
Technical solution architect | Not included |
Partners | |
CrowdStrike Falcon® Go add-on | $2 device/month |
CrowdStrike Falcon® Enterprise add-on | $9 device/month |
| Features | Core |
|---|---|
Network & Browser Security | |
Server performance | up to 1 Gbps |
Virtual Private Gateway locations | 40+ countries |
Web protection | Included |
Session Duration Controls | Included |
Server with Dedicated IP | Included |
IP allowlisting | Included |
Cloud Firewall (FWaaS) | |
DNS Filtering by category | Included |
Custom DNS | Included |
Application Blocker | Included |
IP anonymization | Included |
Browser Firewall | Not included |
Site-to-Site connector | Not included |
URL-based split tunneling (Extension only) | Not included |
Browser DLP elements | |
Camera control | Included |
Microphone control | Included |
File download control | Included |
Clipboard control | Included |
Browser control | |
Browser traffic segmentation | Included |
Policy-based routing | Included |
Instant web access | Included |
Browser secure tunneling | Not included |
Shadow IT management | |
Web activity monitoring | Included |
Browser extension management | Included |
Domain blocking | Included |
Activity Log | Included |
Network app only | |
Shared Gateway locations | 40+ countries |
Download Protection new | Included |
Auto-connect | Included |
VPN Protocol variety | Included |
Device Posture Security | |
IP-based Split Tunneling | Included |
Manual configuration | Included |
Biometrics | Included |
Cloud LAN | Not included |
Multi-platform app support | Included |
Browser extension | Not included |
User authorization & management | |
MFA | Included |
SSO | Included |
User provisioning | |
Device per license | 6 |
Visibility | |
Activity monitoring reports | Included |
Device posture monitoring | Included |
Dashboards | Included |
Platform | |
Dark web monitoring | |
Password manager | |
Support | |
24/7 tech-minded live chat/email support | Included |
Dedicated account manager | Included |
Technical solution architect | Not included |
Partners | |
CrowdStrike Falcon® Go add-on | $2 device/month |
CrowdStrike Falcon® Enterprise Add-on | $9 device/month |
| Features | Premium |
|---|---|
Network & Browser Security | |
Server performance | up to 1 Gbps |
Virtual Private Gateway locations | 40+ countries |
Web protection | Included |
Session Duration Controls | Included |
Server with Dedicated IP | Included |
IP allowlisting | Included |
Cloud Firewall (FWaaS) | Included |
DNS Filtering by category | Included |
Custom DNS | Included |
Application Blocker | Included |
IP anonymization | Included |
Browser Firewall | Included |
Site-to-Site connector | Included |
URL-based split tunneling (Extension only) | Included |
Browser DLP elements | |
Camera control | Included |
Microphone control | Included |
File download control | Included |
Clipboard control | Included |
Browser control | |
Browser traffic segmentation | Included |
Policy-based routing | Included |
Instant web access | Included |
Browser secure tunneling | Included |
Shadow IT management | |
Web activity monitoring | Included |
Browser extension management | Included |
Domain blocking | Included |
Activity Log | Included |
Network app only | |
Shared Gateway locations | 40+ countries |
Download Protection new | Included |
Auto-connect | Included |
VPN Protocol variety | Included |
Device Posture Security | Included |
IP-based Split Tunneling | Included |
Manual configuration | Included |
Biometrics | Included |
Cloud LAN | Included |
Multi-platform app support | Included |
Browser extension | Included |
User authorization & management | |
MFA | Included |
SSO | Included |
User provisioning | Included |
Device per license | 6 |
Visibility | |
Activity monitoring reports | Included |
Device posture monitoring | Included |
Dashboards | Included |
Platform | |
Dark web monitoring | |
Password manager | |
Support | |
24/7 tech-minded live chat/email support | priority |
Dedicated account manager | Included |
Technical solution architect | Not included |
Partners | |
CrowdStrike Falcon® Go add-on | $2 device/month |
CrowdStrike Falcon® Enterprise add-on | $9 device/month |
| Features | Custom |
|---|---|
Network & Browser Security | |
Server performance | custom |
Virtual Private Gateway locations | custom |
Web protection | custom |
Session Duration Controls | custom |
Server with Dedicated IP | custom |
IP allowlisting | custom |
Cloud Firewall (FWaaS) | custom |
DNS Filtering by category | custom |
Custom DNS | custom |
Application Blocker | custom |
IP anonymization | custom |
Browser Firewall | custom |
Site-to-Site connector | custom |
URL-based split tunneling (Extension only) | custom |
Browser DLP elements | |
Camera control | custom |
Microphone control | custom |
File download control | custom |
Clipboard control | custom |
Browser control | |
Browser traffic segmentation | custom |
Policy-based routing | custom |
Instant web access | custom |
Browser secure tunneling | custom |
Shadow IT management | |
Web activity monitoring | custom |
Browser extension management | custom |
Domain blocking | custom |
Activity Log | custom |
Network app only | |
Shared Gateway locations | 40+ countries |
Download Protection new | Included |
Auto-connect | Included |
VPN Protocol variety | Included |
Device Posture Security | custom |
IP-based Split Tunneling | Included |
Manual configuration | custom |
Biometrics | custom |
Cloud LAN | custom |
Multi-platform app support | Included |
Browser extension | custom |
User authorization & management | |
MFA | Included |
SSO | Included |
User provisioning | Included |
Devices per license | 6 |
Visibility | |
Activity monitoring reports | Included |
Device posture monitoring | custom |
Dashboards | custom |
Platform | |
Dark web monitoring | |
Password manager | |
Support | |
24/7 tech-minded live chat/email support | priority |
Dedicated account manager | custom |
Technical solution architect | custom |
Partners | |
CrowdStrike Falcon® Go NEW | |
CrowdStrike Falcon® Enterprise NEW | |
END-TO-END SECURITY
Control threats from login to the last tab
Verify every user and device before they connect. Secure every browser session and SaaS tool once they do. NordLayer covers both.
Control network access and devices
Enforce zero-trust policies, encrypt every connection with Always On VPN, and verify device posture before granting access.
Secure where your team works
Prevent data leaks, manage shadow IT, and keep sensitive business data safe across every web app and SaaS tool your team relies on.
Manage it all from one place
Authenticate every user and device at the gate and protect what they do next. One plan, one control panel, full visibility across both layers.
CREDIBILITY
Trusted by leading companies worldwide
In Security Service Edge category
NordLayer in numbers
15,000+
Businesses protected
10 min
Average time to deploy
40+
Global service locations
Add two layers of defense with one plan
14-day money-back guarantee
ADDITIONAL INFO
Frequently asked questions
Network protection secures every connection your team makes with zero-trust access, Always On VPN, device posture checks, encrypted connectivity, and Download Protection. Browser protection secures where your team actually works with SaaS visibility, data leak prevention, shadow IT management, and SaaS access control. Both are managed from a single control panel.
NordLayer verifies every user and device before they connect to your network. Once they’re in, NordLayer Browser protects what they do at the browser level, securing every web app, SaaS tool, and browsing session. Network security controls who gets access. Browser security controls what happens after. Together, they close the gap between connection and activity.
At the browser level, the NordLayer Browser helps prevent data leaks, exposes shadow IT, and protects sensitive business data across every web app your team uses.
Yes. Both NordLayer network protection and the NordLayer Browser are managed from a single admin control panel. You can set access policies, monitor activity, manage user identities, check device posture, and control browser-level permissions from one place. No switching between tools or separate admin consoles needed.
NordLayer offers 3 tiers (Lite, Core, and Premium) so you can match your plan to your security needs and budget. Browser and network protection are included in every tier. Pricing starts at $9/user/month, and you can try any plan risk-free for 14 days before committing.