Secure your network and browser
Observe and control your team's access, protect where they work, and scale security as you grow. Pick your plan and get set up in minutes. Risk-free for 14 days.
Lite
Start with the essentials. Protect your network and browser with basic threat prevention, visibility, and control features to secure your data as you scale.
$9
USER/ MONTH
SAVE MORE
TOP CHOICE
Core
Increase your control. Manage web traffic, strengthen access policies, and get deeper SaaS governance for your network and browser.
$13
USER/ MONTH
SAVE MORE
Premium
Scale your protection. Apply granular segmentation, zero-trust controls, and access management to your network and browser as your security demands grow.
$16
USER/ MONTH
SAVE MORE
Custom
Large organization with specific security requirements? Let’s build a solution around how your team actually operates.
Tailored pricing available
Payments are charged in USD. VAT, sales tax, or other mandatory tax applicable to your purchase in your country will be calculated additionally.
Your browser is your weakest link. Fix it.
NordLayer Browser gives IT teams full control over web activity, data movement, and access policies without touching endpoints.
Block unauthorized uploads, downloads, and copy-pasting at the source
Spot shadow IT across every site, web app, and extension before it becomes a breach
Enforce browser-level access policies across your workforce in minutes
Compare all plans
| Features | Lite |
|---|---|
Network & Browser Security | |
Server performance Our servers use only the latest hardware components that can sustain the increased load. | up to 1 Gbps |
Virtual Private Gateway locations Create virtual private gateways with dedicated IP addresses in various locations across the globe. | Not included |
Web protection Automated detection and blocking malicious domains based on threat intelligence feeds. | Included |
Session Duration Controls Set automatic logout times for users after a set duration, enhancing security and control. | Included |
Server with Dedicated IP Hide resources from network outsiders by creating a Virtual Private Gateway, which will be accessible to your organization's users exclusively. | Not included |
IP allowlisting Allow only greenlighted IP addresses to connect to your organization’s network. | Not included |
Cloud Firewall (FWaaS) Provide granular network segmentation & advanced resource access control. | Not included |
DNS Filtering by category Choose from 50+ website categories to block while your team members are connected to Virtual Private Gateway. | Not included |
Custom DNS Route traffic over your own or 3rd party DNS service. | Not included |
Application Blocker Choose from 400+ applications, services, and protocols to block while connected to Virtual Private Gateway. | Not included |
IP anonymization Mask users’ IP addresses and physical locations to reduce external tracking and profiling, while enabling secure access to web content. | Not included |
Browser Firewall Apply granular access rules to browser traffic, controlling which resources and destinations users can reach based on organizational policies | Not included |
Site-to-Site connector Connect all users into a secure, single network with encrypted tunnels via Virtual Private Gateways. | Not included |
URL-based split tunneling (Extension only) Configure specific exceptions to bypass a VPN tunnel. | Not included |
Browser DLP elements | |
Camera control Control which websites and applications can access users' camera to prevent unauthorized recording | Included |
Microphone control Control which websites and applications can access users' microphone to prevent unauthorized recording | Included |
File download control Prevent malware and data exfiltration by restricting browser downloads based on specific teams and domains | Included |
Clipboard control Mitigate data leakage by preventing unauthorized copy-paste actions and external applications. Configurable at the team or domain level. | Included |
Browser control | |
Browser traffic segmentation Separate and route browser traffic into distinct segments defined by teams | Not included |
Policy-based routing Manage browser traffic by routing through gateways, enabling direct internet access, or blocking connections based on specific teams or network destinations | Not included |
Instant web access Provide users with one-click, secure access to work resources directly from the browser without additional configuration | Not included |
Browser secure tunneling Encrypts browser traffic through a secure tunnel when accessing web resources, protecting data in transit from interception and unauthorized access | Not included |
Shadow IT management | |
Web activity monitoring Monitor browsing activity across your organization to gain visibility into web usage patterns and potential security risks | Included |
Browser extension management Track browser extensions used by your team members to prevent unauthorized or malicious add-ons | Included |
Domain blocking Block access to specific domains to reduce exposure to risky content and enforce use policies in the browser | Included |
Activity Log Review a detailed log of user browsing events for auditing, compliance, and incident investigation | Included |
Network app only | |
Shared Gateway locations Safely access the internet through various VPN locations. | 40+ countries |
Download Protection Detect and remove malware from newly downloaded files.new | Included |
Auto-connect Automatically connect to a selected VPN gateway when an internet connection is established. | Included |
VPN Protocol variety Secure your network with three different VPN protocols: NordLynx, OpenVPN (UDP), and OnepVPN (TCP). | Included |
Device Posture Security Restrict non-compliant devices from accessing the network according to predefined rules. | Not included |
IP-based Split Tunneling Control which IP addresses or subnets go through the VPN tunnel. Enhance internet performance by encrypting only selected traffic. | Not included |
Manual configuration Manually configure Nordlayer on devices that don't support the usual OS. | Not included |
Biometrics Implement an additional security layer through face recognition and fingerprint scanning when connecting to Virtual Private Gateways. | Not included |
Cloud LAN Share files endpoint-to-endpoint when multiple user devices are connected to NordLayer. | Not included |
Multi-platform app support Use our application with Windows, MacOS, Android, iOS, and Linux. | Included |
Browser extension Secure your internet and cloud resources access on a browser level only. | Not included |
User authorization & management | |
MFA Ensure an additional protection layer when logging into applications or the Control Panel. | Included |
SSO Use unified one-click login with SSO providers: Okta, Entra ID, OneLogin, Google and JumpCloud SSO. | Included |
User provisioning Automate your user onboarding and offboarding with Microsoft Entra ID and Okta. | |
Devices per license Login to account from multiple desktop & mobile devices. | 6 |
Visibility | |
Activity monitoring reports Monitor how and when your users and devices connect to shared and Virtual Private Gateways. | Included |
Device posture monitoring Monitor devices that connect to shared & Virtual Private Gateways and get notified about untrusted ones. | |
Dashboards Interactive dashboards with detailed data about network. | Included |
Platform | |
Dark web monitoring Monitor and get notified about your company data leaked in the deep and dark web. | |
Password manager Password vault for business that helps generate, store, and manage strong passwords. | |
Support | |
24/7 tech-minded live chat/email support Get first line customer support in under one minute. Escalate urgent issues to technical support engineers. | Included |
Dedicated account manager A Dedicated Account Manager is assigned with the purchase of 30 licenses or more. | Not included |
Technical solution architect Get help in planning & designing our solution's setup according to your infrastructure & company needs. | Not included |
Partners | |
CrowdStrike Falcon® Go AI-powered endpoint and mobile security protecting devices from malware, ransomware, and common cyber threats.add-on | $2 device/month |
CrowdStrike Falcon® Enterprise AI-powered endpoint and mobile security with integrated firewall protecting devices from advanced threats with detection, investigation, and response capabilities.add-on | $9 device/month |
| Features | Core |
|---|---|
Network & Browser Security | |
Server performance Our servers use only the latest hardware components that can sustain the increased load. | up to 1 Gbps |
Virtual Private Gateway locations Create virtual private gateways with dedicated IP addresses in various locations across the globe. | 40+ countries |
Web protection Automated detection and blocking malicious domains based on threat intelligence feeds. | Included |
Session Duration Controls Set automatic logout times for users after a set duration, enhancing security and control. | Included |
Server with Dedicated IP Hide resources from network outsiders by creating a Virtual Private Gateway, which will be accessible to your organization's users exclusively. | Included |
IP allowlisting Allow only greenlighted IP addresses to connect to your organization’s network. | Included |
Cloud Firewall (FWaaS) Provide granular network segmentation & advanced resource access control. | |
DNS Filtering by category Choose from 50+ website categories to block while your team members are connected to Virtual Private Gateway. | Included |
Custom DNS Route traffic over your own or 3rd party DNS service. | Included |
Application Blocker Choose from 400+ applications, services, and protocols to block while connected to Virtual Private Gateway. | Included |
IP anonymization Mask users’ IP addresses and physical locations to reduce external tracking and profiling, while enabling secure access to web content. | Included |
Browser Firewall Apply granular access rules to browser traffic, controlling which resources and destinations users can reach based on organizational policies | Not included |
Site-to-Site connector Connect all users into a secure, single network with encrypted tunnels via Virtual Private Gateways. | Not included |
URL-based split tunneling (Extension only) Configure specific exceptions to bypass a VPN tunnel. | Not included |
Browser DLP elements | |
Camera control Control which websites and applications can access users' camera to prevent unauthorized recording | Included |
Microphone control Control which websites and applications can access users' microphone to prevent unauthorized recording | Included |
File download control Prevent malware and data exfiltration by restricting browser downloads based on specific teams and domains | Included |
Clipboard control Mitigate data leakage by preventing unauthorized copy-paste actions and external applications. Configurable at the team or domain level. | Included |
Browser control | |
Browser traffic segmentation Separate and route browser traffic into distinct segments defined by teams | Included |
Policy-based routing Manage browser traffic by routing through gateways, enabling direct internet access, or blocking connections based on specific teams or network destinations | Included |
Instant web access Provide users with one-click, secure access to work resources directly from the browser without additional configuration | Included |
Browser secure tunneling Encrypts browser traffic through a secure tunnel when accessing web resources, protecting data in transit from interception and unauthorized access | Not included |
Shadow IT management | |
Web activity monitoring Monitor browsing activity across your organization to gain visibility into web usage patterns and potential security risks | Included |
Browser extension management Track browser extensions used by your team members to prevent unauthorized or malicious add-ons | Included |
Domain blocking Block access to specific domains to reduce exposure to risky content and enforce use policies in the browser | Included |
Activity Log Review a detailed log of user browsing events for auditing, compliance, and incident investigation | Included |
Network app only | |
Shared Gateway locations Safely access the internet through various VPN locations. | 40+ countries |
Download Protection Detect and remove malware from newly downloaded files.new | Included |
Auto-connect Automatically connect to a selected VPN gateway when an internet connection is established. | Included |
VPN Protocol variety Secure your network with three different VPN protocols: NordLynx, OpenVPN (UDP), and OnepVPN (TCP). | Included |
Device Posture Security Restrict non-compliant devices from accessing the network according to predefined rules. | |
IP-based Split Tunneling Control which IP addresses or subnets go through the VPN tunnel. Enhance internet performance by encrypting only selected traffic. | Included |
Manual configuration Manually configure Nordlayer on devices that don't support the usual OS. | Included |
Biometrics Implement an additional security layer through face recognition and fingerprint scanning when connecting to Virtual Private Gateways. | Included |
Cloud LAN Share files endpoint-to-endpoint when multiple user devices are connected to NordLayer. | Not included |
Multi-platform app support Use our application with Windows, MacOS, Android, iOS, and Linux. | Included |
Browser extension Secure your internet and cloud resources access on a browser level only. | Not included |
User authorization & management | |
MFA Ensure an additional protection layer when logging into applications or the Control Panel. | Included |
SSO Use unified one-click login with SSO providers: Okta, Entra ID, OneLogin, Google and JumpCloud SSO. | Included |
User provisioning Automate your user onboarding and offboarding with Microsoft Entra ID and Okta. | |
Device per license Login to account from multiple desktop & mobile devices. | 6 |
Visibility | |
Activity monitoring reports Monitor how and when your users and devices connect to shared and Virtual Private Gateways. | Included |
Device posture monitoring Monitor devices that connect to shared & Virtual Private Gateways and get notified about untrusted ones. | Included |
Dashboards Interactive dashboards with detailed data about network. | Included |
Platform | |
Dark web monitoring Monitor and get notified about your company data leaked in the deep and dark web. | |
Password manager Password vault for business that helps generate, store, and manage strong passwords. | |
Support | |
24/7 tech-minded live chat/email support Get first line customer support in under one minute. Escalate urgent issues to technical support engineers. | Included |
Dedicated account manager A Dedicated Account Manager is assigned with the purchase of 30 licenses or more. | Included |
Technical solution architect Get help in planning & designing our solution's setup according to your infrastructure & company needs. | Not included |
Partners | |
CrowdStrike Falcon® Go AI-powered endpoint and mobile security protecting devices from malware, ransomware, and common cyber threats.add-on | $2 device/month |
CrowdStrike Falcon® Enterprise AI-powered endpoint and mobile security with integrated firewall protecting devices from advanced threats with detection, investigation, and response capabilities.Add-on | $9 device/month |
| Features | Premium |
|---|---|
Network & Browser Security | |
Server performance Our servers use only the latest hardware components that can sustain the increased load. | up to 1 Gbps |
Virtual Private Gateway locations Create virtual private gateways with dedicated IP addresses in various locations across the globe. | 40+ countries |
Web protection Automated detection and blocking malicious domains based on threat intelligence feeds. | Included |
Session Duration Controls Set automatic logout times for users after a set duration, enhancing security and control. | Included |
Server with Dedicated IP Hide resources from network outsiders by creating a Virtual Private Gateway, which will be accessible to your organization's users exclusively. | Included |
IP allowlisting Allow only greenlighted IP addresses to connect to your organization’s network. | Included |
Cloud Firewall (FWaaS) Provide granular network segmentation & advanced resource access control. | Included |
DNS Filtering by category Choose from 50+ website categories to block while your team members are connected to Virtual Private Gateway. | Included |
Custom DNS Route traffic over your own or 3rd party DNS service. | Included |
Application Blocker Choose from 400+ applications, services, and protocols to block while connected to Virtual Private Gateway. | Included |
IP anonymization Mask users’ IP addresses and physical locations to reduce external tracking and profiling, while enabling secure access to web content. | Included |
Browser Firewall Apply granular access rules to browser traffic, controlling which resources and destinations users can reach based on organizational policies | Included |
Site-to-Site connector Connect all users into a secure, single network with encrypted tunnels via Virtual Private Gateways. | Included |
URL-based split tunneling (Extension only) Configure specific exceptions to bypass a VPN tunnel. | Included |
Browser DLP elements | |
Camera control Control which websites and applications can access users' camera to prevent unauthorized recording | Included |
Microphone control Control which websites and applications can access users' microphone to prevent unauthorized recording | Included |
File download control Prevent malware and data exfiltration by restricting browser downloads based on specific teams and domains | Included |
Clipboard control Mitigate data leakage by preventing unauthorized copy-paste actions and external applications. Configurable at the team or domain level. | Included |
Browser control | |
Browser traffic segmentation Separate and route browser traffic into distinct segments defined by teams | Included |
Policy-based routing Manage browser traffic by routing through gateways, enabling direct internet access, or blocking connections based on specific teams or network destinations | Included |
Instant web access Provide users with one-click, secure access to work resources directly from the browser without additional configuration | Included |
Browser secure tunneling Encrypts browser traffic through a secure tunnel when accessing web resources, protecting data in transit from interception and unauthorized access | Included |
Shadow IT management | |
Web activity monitoring Monitor browsing activity across your organization to gain visibility into web usage patterns and potential security risks | Included |
Browser extension management Track browser extensions used by your team members to prevent unauthorized or malicious add-ons | Included |
Domain blocking Block access to specific domains to reduce exposure to risky content and enforce use policies in the browser | Included |
Activity Log Review a detailed log of user browsing events for auditing, compliance, and incident investigation | Included |
Network app only | |
Shared Gateway locations Safely access the internet through various VPN locations. | 40+ countries |
Download Protection Detect and remove malware from newly downloaded files.new | Included |
Auto-connect Automatically connect to a selected VPN gateway when an internet connection is established. | Included |
VPN Protocol variety Secure your network with three different VPN protocols: NordLynx, OpenVPN (UDP), and OnepVPN (TCP). | Included |
Device Posture Security Restrict non-compliant devices from accessing the network according to predefined rules. | Included |
IP-based Split Tunneling Control which IP addresses or subnets go through the VPN tunnel. Enhance internet performance by encrypting only selected traffic. | Included |
Manual configuration Manually configure Nordlayer on devices that don't support the usual OS. | Included |
Biometrics Implement an additional security layer through face recognition and fingerprint scanning when connecting to Virtual Private Gateways. | Included |
Cloud LAN Share files endpoint-to-endpoint when multiple user devices are connected to NordLayer. | Included |
Multi-platform app support Use our application with Windows, MacOS, Android, iOS, and Linux. | Included |
Browser extension Secure your internet and cloud resources access on a browser level only. | Included |
User authorization & management | |
MFA Ensure an additional protection layer when logging into applications or the Control Panel. | Included |
SSO Use unified one-click login with SSO providers: Okta, Entra ID, OneLogin, Google and JumpCloud SSO. | Included |
User provisioning Automate your user onboarding and offboarding with Microsoft Entra ID and Okta. | Included |
Device per license Login to account from multiple desktop & mobile devices. | 6 |
Visibility | |
Activity monitoring reports Monitor how and when your users and devices connect to shared and Virtual Private Gateways. | Included |
Device posture monitoring Monitor devices that connect to shared & Virtual Private Gateways and get notified about untrusted ones. | Included |
Dashboards Interactive dashboards with detailed data about network. | Included |
Platform | |
Dark web monitoring Monitor and get notified about your company data leaked in the deep and dark web. | |
Password manager Password vault for business that helps generate, store, and manage strong passwords. | |
Support | |
24/7 tech-minded live chat/email support Get first line customer support in under one minute. Escalate urgent issues to technical support engineers. | priority |
Dedicated account manager A Dedicated Account Manager is assigned with the purchase of 30 licenses or more. | Included |
Technical solution architect Get help in planning & designing our solution's setup according to your infrastructure & company needs. | Not included |
Partners | |
CrowdStrike Falcon® Go AI-powered endpoint and mobile security protecting devices from malware, ransomware, and common cyber threats.add-on | $2 device/month |
CrowdStrike Falcon® Enterprise AI-powered endpoint and mobile security with integrated firewall protecting devices from advanced threats with detection, investigation, and response capabilities.add-on | $9 device/month |
| Features | Custom |
|---|---|
Network & Browser Security | |
Server performance Our servers use only the latest hardware components that can sustain the increased load. | custom |
Virtual Private Gateway locations Create virtual private gateways with dedicated IP addresses in various locations across the globe. | custom |
Web protection Automated detection and blocking malicious domains based on threat intelligence feeds. | custom |
Session Duration Controls Set automatic logout times for users after a set duration, enhancing security and control. | custom |
Server with Dedicated IP Hide resources from network outsiders by creating a Virtual Private Gateway, which will be accessible to your organization's users exclusively. | custom |
IP allowlisting Allow only greenlighted IP addresses to connect to your organization’s network. | custom |
Cloud Firewall (FWaaS) Provide granular network segmentation & advanced resource access control. | custom |
DNS Filtering by category Choose from 50+ website categories to block while your team members are connected to Virtual Private Gateway. | custom |
Custom DNS Route traffic over your own or 3rd party DNS service. | custom |
Application Blocker Choose from 400+ applications, services, and protocols to block while connected to Virtual Private Gateway. | custom |
IP anonymization Mask users’ IP addresses and physical locations to reduce external tracking and profiling, while enabling secure access to web content. | custom |
Browser Firewall Apply granular access rules to browser traffic, controlling which resources and destinations users can reach based on organizational policies | custom |
Site-to-Site connector Connect all users into a secure, single network with encrypted tunnels via Virtual Private Gateways. | custom |
URL-based split tunneling (Extension only) Configure specific exceptions to bypass a VPN tunnel. | custom |
Browser DLP elements | |
Camera control Control which websites and applications can access users' camera to prevent unauthorized recording | custom |
Microphone control Control which websites and applications can access users' microphone to prevent unauthorized recording | custom |
File download control Prevent malware and data exfiltration by restricting browser downloads based on specific teams and domains | custom |
Clipboard control Mitigate data leakage by preventing unauthorized copy-paste actions and external applications. Configurable at the team or domain level. | custom |
Browser control | |
Browser traffic segmentation Separate and route browser traffic into distinct segments defined by teams | custom |
Policy-based routing Manage browser traffic by routing through gateways, enabling direct internet access, or blocking connections based on specific teams or network destinations | custom |
Instant web access Provide users with one-click, secure access to work resources directly from the browser without additional configuration | custom |
Browser secure tunneling Encrypts browser traffic through a secure tunnel when accessing web resources, protecting data in transit from interception and unauthorized access | custom |
Shadow IT management | |
Web activity monitoring Monitor browsing activity across your organization to gain visibility into web usage patterns and potential security risks | custom |
Browser extension management Track browser extensions used by your team members to prevent unauthorized or malicious add-ons | custom |
Domain blocking Block access to specific domains to reduce exposure to risky content and enforce use policies in the browser | custom |
Activity Log Review a detailed log of user browsing events for auditing, compliance, and incident investigation | custom |
Network app only | |
Shared Gateway locations Safely access the internet through various VPN locations. | 40+ countries |
Download Protection Detect and remove malware from newly downloaded files.new | Included |
Auto-connect Automatically connect to a selected VPN gateway when an internet connection is established. | Included |
VPN Protocol variety Secure your network with three different VPN protocols: NordLynx, OpenVPN (UDP), and OnepVPN (TCP). | Included |
Device Posture Security Restrict non-compliant devices from accessing the network according to predefined rules. | custom |
IP-based Split Tunneling Control which IP addresses or subnets go through the VPN tunnel. Enhance internet performance by encrypting only selected traffic. | Included |
Manual configuration Manually configure Nordlayer on devices that don't support the usual OS. | custom |
Biometrics Implement an additional security layer through face recognition and fingerprint scanning when connecting to Virtual Private Gateways. | custom |
Cloud LAN Share files endpoint-to-endpoint when multiple user devices are connected to NordLayer. | custom |
Multi-platform app support Use our application with Windows, MacOS, Android, iOS, and Linux. | Included |
Browser extension Secure your internet and cloud resources access on a browser level only. | custom |
User authorization & management | |
MFA Ensure an additional protection layer when logging into applications or the Control Panel. | Included |
SSO Use unified one-click login with SSO providers: Okta, Entra ID, OneLogin, Google and JumpCloud SSO. | Included |
User provisioning Automate your user onboarding and offboarding with Microsoft Entra ID and Okta. | Included |
Devices per license Login to account from multiple desktop & mobile devices. | 6 |
Visibility | |
Activity monitoring reports Monitor how and when your users and devices connect to shared and Virtual Private Gateways. | Included |
Device posture monitoring Monitor devices that connect to shared & Virtual Private Gateways and get notified about untrusted ones. | custom |
Dashboards Interactive dashboards with detailed data about network. | custom |
Platform | |
Dark web monitoring Monitor and get notified about your company data leaked in the deep and dark web. | |
Password manager Password vault for business that helps generate, store, and manage strong passwords. | |
Support | |
24/7 tech-minded live chat/email support Get first line customer support in under one minute. Escalate urgent issues to technical support engineers. | priority |
Dedicated account manager A Dedicated Account Manager is assigned with the purchase of 30 licenses or more. | custom |
Technical solution architect Get help in planning & designing our solution's setup according to your infrastructure & company needs. | custom |
Partners | |
CrowdStrike Falcon® Go AI-powered endpoint and mobile security protecting devices from malware, ransomware, and common cyber threats.NEW | |
CrowdStrike Falcon® Enterprise AI-powered endpoint and mobile security with integrated firewall protecting devices from advanced threats with detection, investigation, and response capabilities.NEW | |
END-TO-END SECURITY
Control threats from login to the last tab
Verify every user and device before they connect. Secure every browser session and SaaS tool once they do. NordLayer covers both.
CREDIBILITY
Trusted by leading companies worldwide
In Security Service Edge category
NordLayer has been very accommodating in terms of our needs. They are flexible to cater timing of payments and also providing exclusive support
Everything is super efficient and easy: negociations, setup, dashboard, accounting, support
Very easy to set up and use and is very reliable. There are good security options to enable the configuration comply with security policies.
NordLayer in numbers
15,000+
Businesses protected
10 min
Average time to deploy
40+
Global service locations
Add two layers of defense with one plan
14-day money-back guarantee
ADDITIONAL INFO
Frequently asked questions
Network protection secures every connection your team makes with zero-trust access, Always On VPN, device posture checks, encrypted connectivity, and Download Protection. Browser protection secures where your team actually works with SaaS visibility, data leak prevention, shadow IT management, and SaaS access control. Both are managed from a single control panel.
NordLayer verifies every user and device before they connect to your network. Once they’re in, NordLayer Browser protects what they do at the browser level, securing every web app, SaaS tool, and browsing session. Network security controls who gets access. Browser security controls what happens after. Together, they close the gap between connection and activity.
At the browser level, the NordLayer Browser helps prevent data leaks, exposes shadow IT, and protects sensitive business data across every web app your team uses.
Yes. Both NordLayer network protection and the NordLayer Browser are managed from a single admin control panel. You can set access policies, monitor activity, manage user identities, check device posture, and control browser-level permissions from one place. No switching between tools or separate admin consoles needed.
NordLayer offers 3 tiers (Lite, Core, and Premium) so you can match your plan to your security needs and budget. Browser and network protection are included in every tier. Pricing starts at $9/user/month, and you can try any plan risk-free for 14 days before committing.