NordLayer Review (2026): Business VPN and Network Access for Small Teams

Quick answer: NordLayer is Nord Security's business VPN and network-access product, priced per user with a five-user minimum: Lite at $8 per user per month billed yearly ($10 on monthly billing), Core at $11 ($14 monthly) and Premium at $14 ($18 monthly), with an Enterprise offer from $6 per user for 200-plus seats (listed on NordLayer's pricing page, 2026-09-12). A server with a dedicated IP — required for the private gateways that make Core and Premium worthwhile — is an extra $40 per month on yearly billing ($50 monthly). For a small team that mainly wants encrypted internet access and threat blocking, Lite is enough; for IP allowlisting into cloud apps you need Core plus a dedicated server; for site-to-site links, a cloud firewall and device checks, Premium.

Disclosure: thevpnsheet.com is a referral partner of several VPN and network security vendors and may earn a fee if you become a customer through a link on this page. Rankings are never influenced by referral fees.

What NordLayer is

NordLayer is the business arm of the company behind NordVPN. Instead of a consumer app that hides one person's traffic, it gives an administrator a console to enrol users, push a VPN client to Windows, macOS, Linux, Android and iOS devices (six devices per licence), route traffic through shared gateways in more than 40 countries or through virtual private gateways with a dedicated IP, and enforce policies such as always-on VPN, session limits, multi-factor authentication and single sign-on with Okta, Entra ID, OneLogin or Google. This review is based on NordLayer's published pricing and feature grid as of 2026-09-12, not hands-on testing.

Pricing (listed on NordLayer's pricing page, 2026-09-12)

Endpoint security add-ons are listed at $2 per device per month for a basic anti-malware layer and $9 per device per month for CrowdStrike Falcon. Every plan carries a 14-day money-back window, and payments are charged in USD. A dedicated account manager is assigned at 30 or more licences.

What each tier includes

Reading down NordLayer's comparison grid:

• Lite covers shared gateways in 40-plus countries at up to 1 Gbps, the NordLynx (WireGuard-based), OpenVPN UDP and TCP protocols, always-on VPN and auto-connect, web protection against malicious domains, download protection that scans new files, session-duration controls and biometrics. It does not include split tunnelling, a dedicated IP, IP allowlisting, DNS filtering, device posture checks, a cloud firewall or site-to-site connections.
• Core adds virtual private gateways in 40-plus locations with a dedicated IP (the server fee applies), IP allowlisting so SaaS apps and cloud consoles only accept traffic from your gateway, and split tunnelling. Device posture security is an add-on and the cloud firewall is listed as "talk to sales".
• Premium includes the site-to-site connector for linking an office or cloud network, the cloud firewall (FWaaS) for segmenting who can reach what, device posture security, and the browser extension with URL-based split tunnelling.
• Enterprise starts from Lite capabilities and is customised, with a 200-user minimum.

What a small team actually pays

Computed from the published prices, excluding endpoint add-ons:

The dedicated server is the line people forget. At five users it nearly doubles the Core bill, but it is also the thing that turns NordLayer from "a VPN for staff" into "a fixed egress IP we can allowlist in Google Workspace, AWS and the payroll portal".

Strengths and limitations

Strengths: transparent per-user pricing with a published feature grid; a clear ladder from simple encrypted access to network access control; SSO and MFA on the admin side; broad device support; a real refund window rather than a free-forever tier that limits features.

Limitations: the five-user minimum means a two-person company still pays for five seats; the most useful Core and Premium features need the dedicated server fee on top; cloud firewall on Core and some Enterprise features are "talk to sales"; endpoint protection is a paid add-on; and, as with any VPN, it protects the connection, not the accounts and devices behind it.

Who should pick what

• Pick Lite if you want every laptop encrypted on hotel and café Wi-Fi with malicious-site and download blocking, and you do not need a fixed IP. For five users that is $40 per month on NordLayer's yearly plan.
• Pick Core plus a dedicated server if the goal is IP allowlisting — locking admin consoles, banking portals or a self-hosted app to one egress address — and you want split tunnelling so video calls bypass the tunnel.
• Pick Premium plus a dedicated server if you have an office network, a cloud VPC or a partner site to connect with site-to-site, want firewall rules between user groups and resources, or need device posture checks before a laptop is allowed in.
• Look elsewhere if you have fewer than five people and only want a personal VPN, or if you need a full zero-trust platform with identity-aware proxies for internal web apps; NordLayer's 14-day refund window makes a short evaluation low-cost either way.

FAQ

Is there a minimum number of users? Yes. Lite, Core and Premium are listed with a five-user minimum, and the Enterprise offer requires 200 users, per NordLayer's pricing page on 2026-09-12. A smaller team pays for five seats.

Do I need the dedicated server? Not on Lite, where it is not available. On Core and Premium the pricing page marks the server with dedicated IP as required, at $40 per month on yearly billing or $50 on monthly billing, because the private gateway, dedicated IP and IP allowlisting features run on it.

How does NordLayer's refund work? NordLayer lists a 14-day money-back window on all plans. Enrol your real team, test always-on behaviour, SSO and the allowlisting workflow within that period, and check current pricing before you commit for a year.