Nord Security is a privacy and cybersecurity company that builds tools to keep people and organisations safe online. Consumers know it through NordVPN.
Its business portfolio is designed for small and medium sized organisations and managed service providers that want cloud-delivered security they can roll out quickly, without building their own network or identity infrastructure.
At A Glance
| Vendor | Nord Security |
|---|---|
| Category | Network security, password management, threat exposure management and privacy |
| Identities covered | Employees and their devices, business logins, passkeys, shared credentials, leaked credentials and session cookies |
| Deployment | Cloud-delivered services with apps, a security deployment agent, a desktop sensor and browser extensions |
| Agentic AI | NordLayer AI Scout monitors AI tools and coding agents |
| Certifications | NordLayer ISO 27001 and SOC 2; NordPass ISO 27001 and SOC 2 Type 2 |
| Founded | 2012 |
| Market classification | Network Security |
What Nord Security Does
The business portfolio is built around four points of risk: the user and device asking for access, the browser where most work now happens, the credentials people use to sign in, and the organisation’s exposure on the open and dark web. Rather than buying a separate tool for each, a smaller security team can cover all four from products that share the same NordLayer gateways and admin tooling. The network layer grew out of the infrastructure behind NordVPN, which is why the business products are delivered as cloud services that can be switched on without new hardware.
Products
NordLayer
NordLayer is the core business product, giving organisations “flexible and easy-to-implement cybersecurity tools for businesses of any size or work model.” It is aimed at companies with remote or hybrid teams that need to control who reaches internal and cloud resources. Its access control follows the principle “Verify every user, every device, every time”: unhealthy devices are blocked and a cloud firewall is enforced. Threat Prevention blocks malicious sites, filters risky content and dangerous domains before they reach employees. Businesses can take dedicated IPs and dedicated gateways, and NordLayer includes ZTNA capabilities. More than 15,000 businesses use NordLayer, a reported figure.
NordLayer Browser
NordLayer Browser is an enterprise browser for small and medium sized businesses that want control over web and SaaS use without managing a full network stack. It covers:
- Shadow IT visibility through web activity monitoring, extension tracking, domain blocking and an activity log
- Data loss prevention that restricts camera, microphone, file download and clipboard access on untrusted websites
- IP anonymisation, web threat protection and category-based DNS filtering
- SaaS access control with SSO, MFA, dedicated IP control and a private gateway with a fixed allowlisted IP
- Zero trust browsing that sends traffic through approved gateways and secure tunnels
NordLayer Intelligence By NordStellar
NordLayer Intelligence gives security teams real-time visibility of their external attack surface, the part of their risk they cannot see from inside the network. It helps them find out when employee or customer data has been compromised and when attackers are preparing to take over accounts:
- Dark web monitoring for compromised data and threats aimed at the company
- Data breach monitoring that identifies compromised employee and consumer data and company devices infected with malware
- Attack surface management to find exposed assets
- Brand protection that removes fake domains, social media accounts and apps
- Session hijacking prevention that detects stolen credentials, active session cookies and autofill data
The service draws on a reported 100 billion or more leaked credentials, and its threat data is also available through an MCP server for cybersecurity and a dark web API, so it can be pulled into AI assistants and other tools.
NordLayer AI Scout
AI Scout is for security and IT teams that need to see shadow AI use and stop sensitive data leaking into prompts. It tracks which AI tools teams use across web and desktop, measures adoption, and raises an alert when sensitive data such as customer information, source code or API keys appears in prompts or in agent activity. For web-based tools it can warn the employee, redact the sensitive part or block a risky prompt before it is sent. Because it also covers coding agents, security teams can see when an agent on a developer’s machine is handling secrets or code.
NordPass Business
NordPass gives each employee a private vault for business logins, and gives administrators control over how credentials are created and shared. Alongside passwords, the vault stores passkeys, notes and payment card details. Shared Folders keep a password up to date for everyone with access, and a built-in Authenticator generates 2FA codes. In the Admin Panel, administrators set company-wide rules such as MFA and password requirements. Password Health finds weak, reused or exposed passwords across the company, the Data Breach Scanner raises an alert when company email addresses or domains appear in known breaches, and an Activity Log records changes across the company vault. More than 11,500 companies use NordPass.
NordLocker Business
NordLocker Business is an end-to-end encrypted cloud storage platform for teams that need to keep sensitive files private. Files are protected with AES-256 encryption in a zero-knowledge architecture, and access is managed through an Admin Panel.
Consumer Products
| NordVPN | The original product, running on more than 7,600 servers in 118 countries over the NordLynx protocol, with post-quantum encryption across all its apps |
|---|---|
| Coveron | Identity theft protection |
| Saily | An eSIM service |
How It Works
The business products are cloud services with client-side components. NordLayer routes traffic through shared or dedicated gateways in more than 40 service locations, and the cloud firewall, threat prevention and dedicated IPs are applied at the gateway.
On endpoints, the NordLayer security deployment agent can be pushed to many customers and devices at once, for example from the Acronis Cyber Protect Cloud console, which suits managed service providers. NordLayer Browser applies its controls inside the browsing session itself. AI Scout combines a desktop sensor, which covers installed apps and coding agents, with a browser extension for web-based AI tools.
Identities And Systems Covered
| Employees | NordLayer verifies each user before granting access, and NordLayer Browser adds SSO and MFA for SaaS applications |
|---|---|
| Devices | NordLayer blocks unhealthy devices, and NordLayer Intelligence identifies company devices infected with malware |
| Business logins and passkeys | NordPass stores logins, passkeys and 2FA codes and checks password health |
| Leaked credentials and sessions | Compromised employee accounts and live browser sessions that attackers could hijack |
| Secrets in AI prompts | AI Scout detects source code, API keys and other sensitive data in prompts and agent activity |
Integrations
| Area | Integrations |
|---|---|
| Identity providers | Okta, Google Workspace, JumpCloud, Entra ID, OneLogin, MS ADFS (NordPass SSO), with automatic user access management through Entra ID and Okta on the NordPass Enterprise plan |
| Cloud | AWS, Google Cloud, IBM Cloud |
| Endpoint and device | SentinelOne, Jamf Cloud |
| SIEM and compliance (NordPass) | Microsoft Sentinel, Splunk, Vanta |
| MSP | Acronis Cyber Protect Cloud |
Company Background
| Founded | 2012, by Tomas Okmanas, Eimantas Sabaliauskas and Jonas Karklys, with NordVPN as the first product. |
|---|---|
| Leadership | Laurynas Zabulis, Chief Financial Officer; Karina Dirvonskienė, Chief Operating Officer; Mykolas Dumčius, Chief Product Officer; Marijus Briedis, Chief Technology Officer of Infrastructure; Donatas Tamelis, Chief Executive Officer, B2B. |
| Funding | Took its first outside capital in 2022 at a USD 1.6 billion valuation, and closed a further USD 100 million round in 2023. |
| Scale | More than 20 million protected users and a team of more than 2,000 people from 73 nationalities, both reported figures. |
Note: This overview is compiled from Nord Security’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.