NordLayer Business Review (2026)

Verdict: Lite is a managed VPN, Core is where private access starts, and the $40 server is the line to read

NordLayer is a business VPN and network access platform from the maker of NordVPN. Its three self-serve plans differ less in price than in what they let you do. Lite is $8 per user per month on annual billing and gives you a centrally managed VPN through shared gateways, SSO, MFA and activity reports. It does not give you a private gateway, a dedicated IP, IP allowlisting, split tunneling or DNS category filtering. Those start at Core, $11 per user per month, and Core and Premium both require a dedicated-IP server at an extra $40 per month. All three have a five-user minimum. So the question is rarely "which plan" but "do we need a fixed company IP or a private gateway at all?" If the answer is no, Lite is a reasonable shortlist item for a distributed team that wants one managed VPN. If it is yes, price Core plus the server, and compare it with Proton VPN and your firewall vendor's remote-access option. Prices below were checked October 27, 2026 on NordLayer's pricing page.

The buying brief

What each plan includes

NordLayer's pricing page lists a feature matrix. The Lite column is readable in full, while the Core and Premium columns were not visible in the text we could fetch, so we rely on the plan descriptions and on what Lite lists as "not included."

Lite lists SSO with Okta, Entra ID, OneLogin, Google and JumpCloud. User provisioning, which automates onboarding and offboarding with Entra ID and Okta, is an add-on, and so is device posture monitoring. A Lite license can log in on up to six devices. Do not equate SSO with lifecycle automation: if offboarding matters, ask whether provisioning is priced into your quote.

What it really costs

All prices are in US dollars, billed annually, before tax. Monthly billing costs more, and an independent price tracker reports $10, $14 and $18 per user with the server at $50 per month, which you should confirm at checkout.

The monthly figures above are the invoice per month on annual billing. A five-person Lite team pays $480 a year, and AWS Marketplace lists the same figure for five Lite licenses. The five-user minimum means a two- or three-person team still pays for five seats. The $40 server fee is fixed, so it adds a lot per head to a small team and little to a large one: at 10 people Core is effectively $15 per person per month, and at 50 it is $11.80.

NordLayer also lists CrowdStrike Falcon Go and Falcon Enterprise as partner add-ons at $2 and $9 per device per month. If you are comparing NordLayer with a combined endpoint and network package, check what you would pay for each part and who supports it.

A worked example for a 12-person firm

A 12-person firm has staff in three states and one internal accounting server that accepts connections only from a fixed address. Lite for 12 users is $96 a month ($1,152 a year), but it cannot provide a dedicated IP, so it fails the requirement. Core for 12 users is $132 plus the $40 server, $172 a month or $2,064 a year. Proton VPN Professional for 12 users is $119.88 plus its $39.99 server, about $159.87 a month, though it has a different feature set. A firewall that already supports remote-access VPN could cost nothing extra in licensing but needs someone to run it. The answer depends on whether the firm wants a managed cloud service or has someone able to maintain firewall VPN policies.

Strengths and limits

Do you need a VPN at all?

Many small teams reach for a VPN because it is familiar, not because it solves their problem. If your staff work entirely in cloud applications, the controls that matter are strong MFA, conditional access, device management and least-privilege roles. A VPN adds an access layer, a tunnel to maintain and a performance cost, and it concentrates traffic through a vendor's gateways. It earns its place when you have something that should not face the internet, such as a file server, an accounting system, a legacy application or an admin console, or when a partner requires a fixed source IP. Our business VPN guide, zero trust guide and remote work security guide explain the decision, and our business VPN vs consumer VPN comparison covers when a consumer product is not enough.

Who should not buy NordLayer

Teams of two to four. The five-user minimum means you pay for seats you will not use. A two-person firm on Lite pays $40 a month, which is $20 per person, two and a half times the headline price. A product with a two-user minimum, or your existing firewall, may be cheaper.

Firms whose only goal is a different IP address. A business VPN is not a privacy tool for staff browsing, and a consumer VPN is not an access-control tool. If the goal is only to protect staff on public Wi-Fi, a simpler tool or an always-on setting in your endpoint product may be enough.

Firms that need a fixed IP but not a large platform. Core's $40 server is a fixed cost. If one cloud application needs an allowlisted address, a single dedicated server from a lower-cost provider, or a cloud firewall rule you control, may do the same job.

Firms without someone to manage it. Gateways, SSO mappings, provisioning and revocation need an owner. A VPN nobody maintains becomes a list of stale accounts with network access.

What to do after you buy

Plan the first month. Connect a pilot group, then add departments in waves. Enforce MFA and SSO from the start, so you do not need to retrofit them. Turn on activity reports and decide who reads them and how often. Set a rule for offboarding, because a departing employee's VPN access should end the same day as their email. If you add a dedicated gateway, document which resources it fronts and which IP addresses are allowlisted at partners, so a future change does not silently break access. Review the plan after one quarter: if nobody used a Core feature, step back to Lite, and if a Lite limit blocked work, record exactly which one before you upgrade.

What to test before committing

1. Name the use case. Identify the internal resource, the approved users, the devices and the locations. Record how access works today and where it fails.
2. Confirm the entitlement. Ask NordLayer which plan includes your SSO provider, provisioning, dedicated IP, filtering and logs. Count all seats and servers in the quote.
3. Pilot three roles. Have an administrator, a normal employee and a departing employee test access, MFA, device loss and revocation, using your real operating systems.
4. Test connection failure. See what happens when the tunnel drops or a user switches networks. Confirm which traffic stays outside the tunnel.
5. Record evidence and effort. Save the connection record, the offboarding result and the support questions, then pick the cheapest plan that passed.

A local administrator still owns policy, support and exceptions. A published setup time is not evidence of how long your deployment will take.

Alternatives: when to look elsewhere

• Proton VPN for Business. Essentials is $6.99 per user per month with a two-user minimum, and Professional adds SSO and SCIM with a dedicated server. See our Proton VPN review.
• Perimeter 81 (Check Point Harmony SASE). A closer comparison for private access and zero-trust features. See NordLayer vs Perimeter 81.
• DNS and web filtering. If your main need is blocking malicious sites, a DNS layer may be cheaper. See our Cisco Umbrella review.
• Your firewall's built-in VPN. If you already own a firewall, check its remote-access features first. See our UniFi review.

Security and evidence

This review relies on NordLayer's pricing and feature matrix and independent price trackers, checked October 27, 2026. We have not measured throughput, support response or deployment time, and we have not run NordLayer for a client. NordLayer states that its systems are ISO 27001 certified, meet SOC 2 Type I and II requirements and meet HIPAA Security Rule objectives. Those are vendor statements and do not make your organization compliant. Ask for the reports, the scope and a business associate agreement if you handle protected health information.

The buying-brief link may be a tracked affiliate link, and Valydex may earn a commission from a qualifying purchase. Partner-account approval, eligible plans and payout terms remain unverified. Confirm the plan and total on the official pricing page before you buy. See our affiliate disclosure and research methodology.

Frequently asked questions

Prices and plan details were checked on October 27, 2026. Confirm the exact plan, term and total before you buy.