Nord Security Due Diligence
Run due diligence on Nord Security: check compliance and get alerts when suppliers change.
Lithuania · nordsecurity.com · 11 vendors
Nord Security is a global leader in digital privacy and security solutions, offering products such as NordVPN, NordPass, and NordLocker. The company provides cybersecurity services for individuals and businesses, focusing on protecting data, managing passwords, and securing online activities.
Resilience scores
- Digital Sovereignty: 18
- Digital Resilience: 8
- Financial Resilience: 7
Technology vendors
- Next.js — Technology — United States
- Salesforce, Inc. — Technology — United States
- YouTube — Telecommunications — United States
- and 8 more
Services catalogue
1 service in catalogue across 1 category; runs on 11 sub-vendors.
- NordPass
Insights
Last updated 2026-07-18 · revision 6
11 direct vendors, 141 subvendors
Direct vendors by controlling owner country (sample)
- United States: 9
- Austria: 1
- Denmark: 1
Subvendors by controlling owner country (sample)
- France: 3
- Unknown: 1
- United Kingdom: 2
Compliance
9 in-scope frameworks identified; showing 3.
ISAE 3000 (source) — No public evidence
Evidence: https://nordsecurity.com/corporate-responsibility, https://res.cloudinary.com/nordsec/image/upload/v1754379965/nord-security-web/corporate/reports/ESG_report_2024_1.pdf, https://a.storyblok.com/f/95676/x/fa2652ccbe/nord-security-esg-report-2025.pdf
Cyber Resilience Act (source) — No public evidence
Evidence: https://nordsecurity.com, https://nordsecurity.com/about-us, https://nordsecurity.com/corporate-responsibility
CPRA — No public evidence
Evidence: https://nordsecurity.com/privacy-policy, https://nordsecurity.com/about-us, https://nordsecurity.com
Financials
Three-year financials
- 2024:
- 2023:
- 2022:
Financial Resilience Score: 7/10
Nord Security demonstrates solid qualitative financial resilience despite the absence of publicly disclosed consolidated financials. The CFO characterized 2024 as the 'strongest year on record' with record-breaking billings and growing profitability, supported by a diversified portfolio spanning consumer VPN, B2B (NordLayer, NordPass B2B, NordStellar), password management, encrypted storage, identity protection, and eSIM (Saily). The company achieved unicorn status at a $1.6B valuation in 2022 and raised an additional $100M in 2023, indicating strong external investor confidence and adequate capitalization. Strategic strengths include a leading position in consumer VPN, rapid B2B expansion (NordPass 3.5x enterprise conversion growth, NordLayer SSE/SWG expansion), strong IP moat with 300+ US cyberspace patents, and robust certifications (ISO/IEC 27001, SOC 2 Type 2, HIPAA). Employee metrics (eNPS of 50, 93% employee confidence) suggest organizational stability. Recent 2025-2026 partnerships with CrowdStrike, Acronis, and Cloudflare enhance distribution reach. However, the score is constrained by structural risks: consumer VPN market maturation and pricing pressure, heavy dependence on performance marketing, 74.7% workforce concentration in Lithuania (single labor market and geopolitical exposure), and execution risk on newly launched products (Saily, NordStellar, NordProtect all launched in 2024). Limited public financial transparency also constrains third-party validation of the company's stated growth and profitability trajectory.
Key strengths: CFO stated 2024 was 'strongest year on record' with record billings and growing profitability, $1.6B unicorn valuation in 2022 plus additional $100M raised in 2023, Diversified portfolio across 7 product brands (consumer + B2B cybersecurity), Strong IP moat: 300+ US cyberspace patents by end-2024, Robust security certifications (ISO 27001, SOC 2 Type 2, HIPAA), Strong B2B growth: NordPass 3.5x enterprise conversion increase in 2024, Strategic 2025-2026 partnerships with CrowdStrike, Acronis, Cloudflare, High employee engagement metrics (eNPS 50, 93% confidence)
Risk factors: No public disclosure of consolidated revenue, EBIT, or equity, Consumer VPN market maturation and pricing pressure, 74.7% workforce concentration in Lithuania (single labor market/geopolitical risk), Newly launched products (Saily, NordStellar, NordProtect) still sub-scale with execution risk, Heavy performance-marketing spend requirements in consumer cybersecurity, Regulatory risk from EU encryption-weakening proposals, CSRD compliance obligations beginning 2024, Proximity to Russia/Belarus/Ukraine geopolitical zone
Workforce by country
- Lithuania: 1297
- Poland: 247
- Germany: 154
- Remote (other): 39
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.