NordLayer pricing — zero-trust network access & business VPN
Nord Security's own published USD list pricing for NordLayer — Lite through Enterprise. We license, deploy and manage NordLayer for your team on top of Nord's own self-serve pricing.
How NordLayer works
NordLayer runs on NordLynx, Nord's own WireGuard-based VPN protocol, and verifies every connection against zero-trust principles rather than trusting anyone already inside the network perimeter. Core and Premium add a network access control layer on top — DNS filtering, application blocking and device posture checks that decide what a connecting device is allowed to reach, not just whether it's encrypted. Premium goes further with site-to-site connectors and cloud LAN, letting multiple offices and cloud environments join one segmented private network instead of relying on point-to-point VPN tunnels.
Lite
$8 / user / month
$6.40/user/mo billed annually · 5-user minimum
Shared gateways in 40+ countries, basic web protection, and an always-on VPN built on NordLynx (Nord's WireGuard-based protocol) with zero-trust verification on every connection.
Get a quote →Core
$11 / user / month
$8.69/user/mo billed annually · optional $40/mo dedicated-IP server
Everything in Lite, plus DNS filtering, application blocking, biometric authentication, SSO (Entra ID, Okta, JumpCloud, Google Workspace) and a dedicated account manager.
Get a quote →Premium
Most popular$14 / user / month
$10.92/user/mo billed annually · optional $40/mo dedicated-IP server
Everything in Core, plus site-to-site connectors, cloud LAN, cloud firewall and device posture security — built for multi-office and multi-cloud teams.
Get a quote →Enterprise
Custom quote
200+ users
Custom feature bundling, up to 60 VPN locations, and dedicated technical solution architect support for large deployments.
Get a quote →FX moves; USD figures are for comparison only.
Public list prices observed 2026-07-05. Subject to change by the vendor / operator without notice.
Regional pricing & availability notice
Prices on this page and its vendor sheets are a mix of sourcing bases: NordLayer's own published global USD list price, and NordStellar's Brocent-negotiated partner-deal reference price (Nord publishes no public list price for NordStellar) — neither is Brocent's APAC (Hong Kong, mainland China, Japan, Singapore, Malaysia) list price, currency, or confirmed availability. Actual pricing, invoicing currency, licensing terms, and product/SKU availability vary by country and are set by the vendor or Brocent's partner agreement, not published unilaterally by Brocent. Always confirm exact regional pricing, licensing, and compliance requirements with Brocent before purchase; nothing on this page is a quote.
Which plan fits
Small remote team needing baseline encryption
Lite covers always-on VPN encryption and shared gateways across 40+ countries — enough for a small team that just needs secure baseline connectivity.
Team with SSO wanting device-level policy
Core adds SSO integration (Entra ID, Okta, JumpCloud, Google Workspace), DNS filtering and application blocking — device-level policy without the site-to-site networking of Premium.
Multi-office / multi-cloud team needing segmented networking
Premium adds site-to-site connectors, cloud LAN and a cloud firewall — for teams running infrastructure across multiple offices or cloud providers that need real network segmentation, not just endpoint VPN.
NordLayer pricing FAQ
Is this the same as a consumer VPN?
No. NordLayer is licensed and billed per seat with a central admin console, SSO and network segmentation — built for teams, not individuals. It shares the same NordLynx (WireGuard-based) protocol with the consumer NordVPN app, but the two products are managed and billed completely separately.
Do I need the dedicated-IP server add-on?
Only if you need a fixed outbound IP address for allow-listing (e.g. so a bank or SaaS vendor can whitelist your team's IP). Lite doesn't offer this add-on at all; Core and Premium offer it for an extra $40/month.
Rolling out NordLayer across your team?
We size the right NordLayer plan, handle licensing and deployment, and configure SSO and network segmentation for you. Tell us your headcount to get started.