Menlo Secure vs NordLayer comparison

Why PeerSpot?

Menlo Security and Nord Security are both solutions in the Secure Web Gateways (SWG) category. Menlo Security is ranked #25, while Nord Security is ranked #33. Menlo Security holds a 2.3% mindshare in WSG, compared to Nord Security’s 1.3% mindshare. Additionally, 100% of Menlo Security users are willing to recommend the solution, compared to 100% of Nord Security users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Menlo Secure and NordLayer based on real PeerSpot user reviews.

Find out what your peers are saying about Cisco, Fortinet, Zscaler and others in Secure Web Gateways (SWG).

To learn more, read our detailed Secure Web Gateways (SWG) Report (Updated: September 2026).

Buyer's Guide

Secure Web Gateways (SWG)

September 2026

Download the complete report

Helped 917,433 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of October 2026, in the Secure Web Gateways (SWG) category, the mindshare of iboss is 3.2%, up from 2.2% compared to the previous year. The mindshare of Menlo Secure is 2.3%, up from 1.6% compared to the previous year. The mindshare of NordLayer is 1.3%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Secure Web Gateways (SWG) Mindshare Distribution
Product	Mindshare (%)
iboss	3.2%
Menlo Secure	2.3%
NordLayer	1.3%
Other	93.2%

Secure Web Gateways (SWG)

Featured Reviews

Ashok Ananthula

Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees

Cloud gateway has strengthened remote web security and now needs better Mac and ISP support

The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.

Read full review

reviewer2701794

Head Of Bluechip Enterprise at a manufacturing company with 51-200 employees

Provides strong protection and multiple use cases but struggles with market recognition

There aren't specific areas for improvement; however, they're not as well known as the big vendors such as Palo Alto. Menlo Secure is a smaller company with limited resources and funding, which makes it challenging to compete with larger companies such as Palo and Cisco. What can be improved is market awareness and adoption of the technology. When selling it in the channel, regardless of how good the technology might be, success depends more on market adoption and awareness.

Read full review

Christophe Derdeyn

Partner delaware Singapore at delaware Singapore

A convenient and easy tool with an incredibly high number of dialing points

The solution is convenient and easy. It has an incredibly high number of dialing points for pretty much every single country in the world. It has a few additional security features. It has a function that prevents unsecured access if my connection were to drop for any reason. It’s something I like. It has threat protection features. It can protect my web connection and files against malicious downloads and trackers.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"As I mentioned, the return on investment is significant, as it saved our office locations' bandwidth because when you are working remotely at home, your internet traffic routes directly to iboss and will not go to your office building, saving bandwidth bottlenecks and ensuring that issues with our building internet circuits will not impact your internet connectivity because you are directly going to the iboss data center."

"It was a very easy product to install. It can be deployed very fast."

"The iboss system is highly reliable. The false positive rates are small compared to some other systems we've experienced through other partner agencies who use competing solutions."

"Iboss is a solution that prevents advanced persistent threats, and has a zero tolerance for attacks."

"iboss has significantly lowered the number of security incidents. It is crazy how much it blocks and how much it is aware of the outside danger."

"From a use-case scenario, what I like the most is the plug-in. I like the fact that we can do the filtering of these devices offsite independent of the network they are connected to, and we do not have to have traffic coming back inside our network."

"Deploying iboss leads to good return on investment, estimated around 70% to 80%."

"This product is solid, fairly easy to use, and reliable."

More iboss pros

"We have definitely seen ROI, as we save a ton of money and time because the numerous hits that we were receiving from our security tools prior to implementing them had to all be chased down, dispositioned, and endpoints had to be reimaged."

"The fact that it is a cloud proxy solution is another feature we like. For example, if you acquire a new company, you can use it to protect that new company without the need to install anything physically on their networks."

"This security technology addresses risk and enables people to conduct business without that risk, which is where the ROI is realized."

"Either you have access to something or don't have access to it, and if you do, we can ensure, 100 percent of the time, that there is nothing malicious that is going to impact our system in any way."

"Accessing the internet with a proxy from anywhere is the most valuable feature. It ensures that users are only able to browse legitimate websites. If they happen to go to a legitimate website with a malicious payload, the isolation feature will take care of that."

"For us, the primary goal is protection on the web, and that's extremely important. We're not using any of the other services at this time. The web part is key to the success of the organization. It gives us the ability to protect. It can isolate. It opens the session in an isolated format so that the code isn't running locally. It is running over in the Menlo environment, not in ours. It is not running on the local computer, whereas if you were to go to a normal website, it would run Java or something else on the local machine and potentially execute the malicious code locally. So, it does give us that level of protection."

"The solution is invisible to our end users, so it doesn't have any impact on their work or performance."

"It has reduced security events to follow up on. While it is not 100%, there has been probably a 90% or more reduction. We were getting hit left, right, and center constantly from people browsing the Internet and hitting bad websites. It was not just bad websites that were stood up to be malicious, but good sites that were compromised."

More Menlo Secure pros

"The solution is convenient and easy."

Cons

"The reporting feature needs improvement."

"For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company ExxonMobil."

"The endpoint-type solution is an area that needs some improvement."

"I have heard they are doing DDoS filtering, but I am not certain if they are implementing it correctly."

"One thing I would like to see differently with their Zero Trust platform is that some of the AI aspects related to high-risk activities have more false positives."

"Sometimes the agent stops working in iboss, and we have to reinstall the agent."

"Our biggest problem with their service was it did not recognize the device and filtering did not always work correctly."

"SSL decryption: We had issues with learners using apps instead of using web browsers. This type of encryption is tough for any appliance in a BYOD environment."

More iboss cons

"Currently, I don't have a good way to see which of my rules are being used in the access control lists."

"In the best of all worlds, we wouldn't have to make any exceptions. However, that is a big ask because a lot of that depends on how websites are constructed. For example, there are some very complex, application-oriented sites that we end up making exceptions for. It is really not that big an issue for us to make the exceptions. We feel like we are doing that without a huge impact on our security posture, but we do have to make some exceptions for complex sites, e.g., mostly SaaS-type sites and applications."

"Currently, I don't have a good way to see which of my rules are being used in the access control lists. I have numerous entries, but are they all still needed? A report that would show me my list of who is allowed and whether we're actually using it would be useful because I can then go clean up my list. It would be easier to manage. We would eliminate the vulnerability of unused services."

"Menlo Secure is a smaller company with limited resources and funding, which makes it challenging to compete with larger companies such as Palo and Cisco."

"We are now transitioning to another solution. The main reason for that is that managing all of the exceptions and troubleshooting all of the issues our users have had connecting to the internet has become too significant in terms of workload, compared to what we hope we will have with another solution."

"The user monitoring could still be improved."

"The tool is not perfectly stable."

Pricing and Cost Advice

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"The overall pricing for iboss is very competitive and transparent."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"It is probably in line with other solutions, but I do not deal with the financial side."

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"It is expensive compared to one of its competitors."

"We save a ton of money and time. Previously, the numerous hits that we were receiving from our security tools, prior to implementing them, had to all be chased down, dispositioned, and endpoints had to be reimaged. It was just a ton of effort to do all that. That is where the savings from time and money come in."

"It is appropriately priced for what they're doing for us. Considering the protection provided, I feel their pricing is spot-on."

"The solution is expensive. It's more expensive than the solution I previously used. Compared with the other cloud-based solutions, it's very competitive."

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Secure Web Gateways (SWG) solutions are best for your needs.

See recommendations

917,433 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Construction Company

Manufacturing Company

14%

Construction Company

11%

Outsourcing Company

Comms Service Provider

15%

Outsourcing Company

10%

Construction Company

Healthcare Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	8
Large Enterprise	14

No data available

Questions from the Community

What needs improvement with iboss?

I think iboss could be improved by emphasizing the modular function even more during sales presentations and demonstr...

See all answers

What is your primary use case for iboss?

iboss is primarily used for content filtering within school districts and public K-12 school districts, and it can al...

See all answers

What is your experience regarding pricing and costs for iboss?

My experience with iboss's pricing structure, setup cost, and licensing model has been positive, straightforward, and...

See all answers

What needs improvement with Menlo Security Secure Web Gateway?

There aren't specific areas for improvement; however, they're not as well known as the big vendors such as Palo Alto....

See all answers

What is your primary use case for Menlo Security Secure Web Gateway?

People are mainly using it for zero trust web access. Menlo Secure is built from the ground up to provide zero basic ...

See all answers

What advice do you have for others considering Menlo Security Secure Web Gateway?

Secure file sharing and data protection is not exactly what Menlo Secure is designed to do. While it can handle some ...

See all answers

Ask a question

Earn 20 points

Comparisons

Prisma Access by Palo Alto Networks vs iboss

Compared 10% of the time

Netskope vs iboss

Compared 8% of the time

Fortinet FortiGate vs iboss

Compared 7% of the time

Cisco Umbrella vs iboss

Compared 6% of the time

FortiSASE vs iboss

Compared 6% of the time

More iboss Competitors

Prisma Access Browser vs Menlo Secure

Compared 12% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs Menlo Secure

Compared 11% of the time

Netskope Next Gen Secure Web Gateway vs Menlo Secure

Compared 10% of the time

Cloudflare One vs Menlo Secure

Compared 9% of the time

Amdocs Cloud Foundations Program vs Menlo Secure

Compared 2% of the time

More Menlo Secure Competitors

Cloudflare One vs NordLayer

Compared 13% of the time

OpenVPN Access Server vs NordLayer

Compared 11% of the time

Tailscale vs NordLayer

Compared 10% of the time

Zscaler Zero Trust Exchange Platform vs NordLayer

Compared 9% of the time

Prisma Access by Palo Alto Networks vs NordLayer

Compared 5% of the time

More NordLayer Competitors

Product Reports

Buyer's Guide

iboss

October 2026

Download iboss product report

Buyer's Guide

Menlo Secure

October 2026

Download Menlo Secure product report

Buyer's Guide

Enterprise Infrastructure VPN

September 2026

Download NordLayer product report

Also Known As

iBoss Cloud Platform

Menlo Security Web Security, Menlo Web Security

No data available

Overview

iboss is the Zero Trust SASE platform that gives organizations complete visibility and governance over their AI, data, and applications through one unified platform, one console, one policy engine, and one data lake.

Your endpoints may already stop malware. Your data and application activity can still be invisible. iboss decrypts and understands every connection, then turns that signal into answers security leaders can act on.

The platform leads with three capabilities in this order: AI Security and Visibility, Data Security and Visibility, and App Visibility and Control. Zero Trust Network Access, VPN replacement, and SD-WAN sit underneath as the access fabric that carries those three. Trusted by global enterprises and government agencies.

What are the most important features of Iboss?

- AI Security and Visibility: conversation capture, shadow-AI discovery, AI DLP, and agent governance across Claude, Co-Work, ChatGPT, Gemini, and Grok, and emerging services.

- Data Security and Visibility: full SSL/TLS decryption, deep content inspection, MIP label compliance, and one-click compliance reporting.

- App Visibility and Control: signatureless CASB, dual risk scoring, in-app controls, and SSPM for major SaaS.

- Containerized Zero Trust SASE: dedicated containers, isolated SSL keys, one console, one policy engine, one data lake.

- Access fabric: ZTNA, VPN replacement, and SD-WAN under the same platform.

What benefits should users consider in reviews?

- Complete visibility over AI, data, and applications from one platform instead of separate point tools.

- Encrypted traffic is inspected by default so data decisions use content and context together.

- Shadow SaaS and new web tools appear as they are used, with enforceable controls in one console.

- Native data sovereignty through dedicated containers, in-region inspection, and per-customer SSL key custody.

- Scale proven in published materials: 10M+ users, 100+ countries, 150B+ transactions, 2.5B+ threats blocked.

Economic buyers are CISOs, CIOs, and VPs of Security. Champions include security architects, network and infrastructure leaders, SecOps, and GRC. Primary segments: enterprise and business, financial services, government (including FedRAMP Gov Cloud), healthcare, manufacturing, legal and professional services, retail and hospitality, and MSP/MSSP partners. Education, including K-12, is one vertical among these.

iboss

Menlo Security Secure Application Access

Menlo Security Secure Application Access makes zero trust access easy, giving users secure connectivity to private applications, including web and legacy applications. At the core of Secure Application Access is the Menlo Secure Cloud Browser, which fetches, secures and delivers the content for users.

In addition to providing simple-to-deploy, clientless ZTA, Secure Application Access and the Menlo Secure Cloud Browser protect applications from attacks such as session hijacking, cookie manipulation, and other tactics that employ protocol manipulation.

Secure Application Access protects applications from Internet threats and provides granular controls for added protection of the application and associated data. These security controls include Read-only/Read-write, Upload/download, Copy/paste, AV scanning, Sandboxing, and Data Loss Prevention.

Last Mile Data Protection

Menlo Last-Mile Data Protection identifies and prevents sensitive data from leaving your company by meticulously inspecting all file uploads and user input across browsing sessions. Leveraging the Secure Cloud Browser, users are protected from the internet and you can protect your organization from data loss with comprehensive traffic monitoring and controls. This approach addresses the growing concerns surrounding data leakage in the age of AI tools like ChatGPT.

By identifying sensitive data through file types, regular expressions, or predefined libraries, Menlo Last-Mile Data Protection empowers security teams to regulate data input into AI platforms and prevent unauthorized uploads. This capability provides crucial protection for intellectual property, PII, and other confidential information.

The solution leverages the Menlo Cloud Security Platform's visibility and control over traffic to reliably detect and prevent data leaks originating from both browser submission forms and non-browser traffic. With the ability to inspect encrypted web traffic, Menlo Last-Mile Data Protection enforces DLP policies consistently across all users and devices, ensuring comprehensive data protection.

Menlo Security

NordLayer offers a robust cybersecurity solution designed to protect business networks with advanced features. It caters to enterprises looking for secure, scalable, and efficient network management.

NordLayer delivers a high level of network protection with flexible features tailored for businesses. Its cloud-based architecture ensures seamless implementation and integration, allowing dynamic companies to manage secure access and connectivity easily. By emphasizing user-centric security practices, NordLayer addresses the evolving challenges of network security efficiently.

What are the main features of NordLayer?

Network Access Control: Manage user and device access to networks effortlessly.
Secure Remote Access: Safeguard data in transit with encrypted remote connectivity.
Centralized Security Management: Simplify security policies and management from a single interface.
Scalability: Quickly scale security measures as businesses grow.
Multi-Factor Authentication: Add an extra layer of protection with easy-to-use authentication.

What benefits and ROI should users expect?

Improved Security Posture: Enhance network defenses against threats.
Operational Efficiency: Streamline network management and policy enforcement.
Cost-effectiveness: Reduce infrastructure costs with a subscription model.
Compliance Support: Meet industry-specific data protection standards easily.

NordLayer is particularly effective in industries like finance and healthcare, where data protection is critical. Its flexibility and compliance features support these sectors' stringent security requirements, ensuring that sensitive information remains protected while maintaining high operational effectiveness.

Nord Security

Sample Customers

Trusted by global enterprises and government agencies.

Information Not Available

Hostinger, Shutterstock, USMobile, Soundcloud, Calendly, whatagraph.

Buyer's Guide

Secure Web Gateways (SWG)

September 2026

Download Free Report

Find out what your peers are saying about Cisco, Fortinet, Zscaler and others in Secure Web Gateways (SWG). Updated: September 2026.

DOWNLOAD NOW

917,433 professionals have used our research since 2012.

See our list of best Secure Web Gateways (SWG) vendors and best ZTNA vendors.

We monitor all Secure Web Gateways (SWG) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.