nordlayer.com

HTML metadata

Title

Network security platform for business | NordLayer

Description

Toggle-ready cybersecurity to connect, protect, detect, and respond to network-based threats. Cloud-based future-proof technology backed by unmatched support.

Language

en

Canonical

https://nordlayer.com/

Translations

en-us

Open Graph

url: https://nordlayer.com/home-3/
title: Network security platform for business | NordLayer
description: Toggle-ready cybersecurity to connect, protect, detect, and respond to network-based threats. Cloud-based future-proof technology backed by unmatched support.

Technology

CDN: Cloudflare
CMS: Next.js

Analytics

Google Tag Manager

Ads

Meta Pixel

Third-party hosts loaded (8)

analytics.twitter.com×2
connect.facebook.net×2
px.ads.linkedin.com×2
static.ads-twitter.com×2
t.co×2
www.facebook.com×2
s1.nordcdn.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

2021-05-20

Expires

2027-05-20 366 days left

Updated

2025-05-21

Name servers

sandy.ns.cloudflare.com
wesley.ns.cloudflare.com

DNS records live

NS

sandy.ns.cloudflare.com
wesley.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 9 TXT records

google-site-verification=w954Sru5NTfQ1JLCBo4l9F7f0Gw5OVobOEbDuEqUbP4
nordpass-domain-verification=25cae684390a43198c6dc16ddd8a82c3
atlassian-sending-domain-verification=5292f862-763d-4264-8f14-4651c73e6941
docusign=381940bf-6b85-4a33-b635-8bc662aab2c8
google-site-verification=6ofrV5diy17m0jPDVfE0DvNsDpWjxKqd-hI4eYufjJA
google-site-verification=AA6WY6WpcdLwJpW20ic_sECfF2cybJ76OM2TmuQYHzk
google-site-verification=GGVC01VhnAyLFq4NwbA7waqwQIGb3ngv1nJNUnZeQ3w
google-site-verification=GsTAfxdwQurPoOPk9DadV8sGO5utIPbhKfDB23beeZo
google-site-verification=dULawuvWz4dfxJ4WCE12nli_XZ6mi9kPuQl7aANQ3Zk

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:mail.zendesk.com include:_spf.mlsend.com include:143758988.spf07.hubspotemail.net -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; sp=quarantine; pct=100; rua=mailto:dmarc@xydxr8yd.uriports.com; ruf=mailto:dmarc@xydxr8yd.uriports.com; fo=1:d:s

policy: quarantine · sp=quarantine

DKIM

Show 5 DKIM selectors

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCDP6rb4rMqM3BZf8sdlQBhGxaw+9OWRI6WmFOvyvDZNdWQMhLRhBlirGLpNwStNibr+rhzkuOa0stZfxjRoT…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRMZIsLiy+xlrUj6lGV2W5bl+zH+xnenDAqszz6TwDZVxU2A5JVc9f9fynf8TWu2AGtmD2ySXNhJuV62VS…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNIkCp00Zx86ahbJRRQWPXCv65Q76TVqnoilPJ9uYatkVODYe6Xa709Qe83EvLapItG+VGNA18J0+xMmLoIDPBi+…
smtpapi: v=DKIM1; k=rsa; h=sha256; p=ysGqTjWuvTlicyQxjYL1D0Wk+1/XwfprV3qwASenQTt9i7BtWiMEFw1US2DSa99+HQ3MAqGQ38k/ut2Oz5QtvESMGdTbmKmpyDEMxA64qgMD/Dxk…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2025-09-15 to 2026-10-17

Expires in 151 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://nordlayer.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: base-uri 'self'; default-src 'self' www.google.com www.googletagmanager.com nordlayer.com *.nordlayer.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googleadservices.com www.google.com www.gstatic.com *.google-analytics.com www.googletagmanager.com https://www.googleanalytics.com https://pagead2.googlesyndication.com googleads.g.doubleclick.net nordlayer.com *.nordlayer.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io *.typeform.com *.hsadspixel.net *.hs-analytics.net js.hscta.net *.hubspot.com static.hsappstatic.net *.usemessages.com *.hs-banner.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hs-scripts.com *.hubspotfeedback.com feedback.hubapi.com https://a.quora.com/qevents.js *.redditstatic.com *.alb.reddit.com px.ads.linkedin.com *.oribi.io snap.licdn.com analytic
strict-transport-security: max-age=31536000; includeSubDomains; preload