# NordLayer

NordLayer, formerly known as NordVPN Teams, is a network access security service with applications for Microsoft Windows, macOS, Linux, Android and iOS and Browser extension. The software is marketed as a privacy and security tool that enables the implementation of Zero Trust Network Access (ZTNA), Secure Web Gateway (SWG), and Firewall-as-a-Service (FWaaS) in hybrid and multi-cloud cloud environments.
It is developed by Nord Security (Nordsec Ltd), a company that creates cybersecurity software, and was initially supported by the Lithuanian startup accelerator and business incubator Tesonet.

## History

NordLayer was founded in 2019 as NordVPN Teams as a subsidiary of NordSecurity, a technology company that develops and provides virtual private network (VPN) services, such as NordVPN and SurfShark.
In October 2020, NordVPN Team relocated to the United States as part of a larger effort to expand its operations and better serve its enterprise clients. Nevertheless, Nordlayer committed to maintaining its Panamanian corporate structure, allowing it to remain outside the jurisdiction of the Fourteen Eyes intelligence sharing pact, which includes the United States, the United Kingdom, Australia, Canada, and other countries.
In September 2021, the NordVPN Teams was rebranded to NordLayer. The transition marked the introduction of advanced network access control capabilities, positioning NordLayer as part of the broader secure access service edge (SASE) framework.

## Products

NordLayer is based on a cloud-based cybersecurity product that enables organizations to implement secure service edge (SSE) best practices, combining advanced internet access security, network access control, and network connectors into one cohesive solution.
The NordLayer platform enables IT administrators to add, remove, or transfer user accounts, dedicated servers, or custom gateways — with static or dedicated IP addresses — for specific teams to remotely access a company's LAN. In addition, network administrators have the ability to monitor user activity and obtain information about the connection. This includes checking whether the devices being used comply with predefined security rules.
Nordlayer offers a Single Sign-On (SSO) login option to its users. SSO logins are currently supported through various providers, including Google SSO, Entra ID (Azure AD), Okta, JumpCloud and OneLogin. NordLayer supports various second-factor confirmation (multi-factor authentication) methods, including SMS authentication, Time-based One-Time Password (TOTP) authentication, and biometric authentication.
NordLayer enables to implementZero Trust Network Access (ZTNA) measures, that are based on the principle "Never trust – always verify". NordLayer provides continuous authentication and identity verification to grant access to network resources based on multiple network access control rules. NordLayer employs the Advanced Encryption Standard (AES) with 256-bit keys and the ChaCha20 stream cipher.
NordLayer prevents cyber threats like DDoS, Man-in-the-Middle (MITM) attacks, phishing, data leaks, and others with features such as two-factor authentication (2FA), Always-On VPN, kill switch, IP allowlisting, Cloud Firewall, Device Posture Security, and others.
NordLayer's Network Visibility features allow for the monitoring of network traffic and performance, and devices connected to the network ensuring a thorough understanding of network dynamics.
NordLayer's Device Posture Security provides a protective measure that ensures access is granted only to devices that meet per-defined security rules, thereby safeguarding networks from potential threats.
NordLayer's Secure Web Gateway (SWG) provides features for web security such as web filtering, content filtering, application control, IP masking, and traffic encryption.
Nordlayer currently has 30+ global dedicated server locations.

## Cybersecurity researches
### Working from home research

In 2020, NordVPN Research Teams conducted a study revealing that, on average, employees were spending more time at their desks compared to the pre-pandemic era. Utilizing data from its servers, NordVPN Teams examined the usage patterns of private business networks to gain insights into the remote work practices of employees. The findings indicated that individuals working from home experienced extended work hours and a heightened workload, suggesting a notable shift in work dynamics since the onset of the Covid-19 pandemic.

### Global Remote Work Index

In 2022, NordLayer launched The Global Remote Work Index, an international index that provides data and insights to identify the best countries for remote work. It is based on the evaluation of more than 60 variables in 66 countries, including the availability of broadband internet, the cost of living, digital and physical infrastructure and the cost of labor. The 2023 update, in continuation of the previous year's edition, was assembled by assessing 108 destinations through the examination of four key criteria: online security, economic factors, digital and physical infrastructure, and social safety.

### Black Friday research

In 2023, NordLayer disseminated information on safeguarding personal details against potential hacking threats. The cybersecurity firm reported a 2.3% year-on-year increase in Black Friday spending in 2022, while a separate study conducted by Barclays revealed a corresponding surge of up to 22% in losses associated with these sales.

### B2B LinkedIn scam research

In 2023, NordLayer conducted a new research study by surveying 500 respondents across Canada, the United Kingdom, and the United States. The respondents, comprising adults aged 18 and above from non-governmental organizations, were specifically queried about the types of scams they encountered on the LinkedIn social media platform and the subsequent impact on their businesses. The surveyed subindustries encompassed business management and support services, e-commerce, education, finance and insurance, health care, information and communication, IT, professional and technical services, as well as consulting.

### Hollywood hacking scenes: facts vs. fiction

In 2024, NordLayer published a study titled "Hollywood Hacking: Facts vs. Fiction", analyzing how accurately hacking scenes in popular films reflect real-world cybersecurity practices. By comparing iconic hacking moments from films like Tron and The Emoji Movie to actual techniques, the study explained significant discrepancies, particularly around exaggerated timeframes, oversimplified interfaces, and unrealistic tools. The goal was to raise awareness of the misconceptions spread by media portrayals of hacking and educate the public on the true nature of cybersecurity threats.

### Biggest GDPR fines study

In October 2024, NordLayer conducted a comprehensive study analyzing the largest General Data Protection Regulation (GDPR) fines imposed since the law's implementation in 2018. This in-depth examination covered 10 significant cases, exploring the types of violations and the substantial fines levied on organizations, with a particular focus on sectors like technology, e-commerce, and finance. The report identifies common patterns of non-compliance, providing valuable insights into how businesses can better align with GDPR standards.

## Reception

In a review published by TechRadar in August 2022, the reviewer wrote positively about NordLayer's interface, kill switch, private gateways, biometrics, and concluded that "NordLayer is an easy-to-use service, with simple but well-engineered quality apps, which makes it easy to secure employee access to your networks and the internet."
In January 2023, a favorable review by Forbes noted that NordLayer's security solutions are great for businesses "looking to monitor the security level of their company and encrypt all of their team members' accounts through a single portal".
In September 2024, Emerging Tech Brew referenced NordLayer's insights into the rising number of cyberattacks on educational institutions, recognizing it as a valuable resource for organizations aiming to address these threats proactively.