All posts

A single leaked IP almost took down our staging environment.

That was the moment we knew IP-based access control had reached its breaking point. Static IP allowlists don’t match the way teams work today. Engineers move. Networks change. VPNs break. And every time, security takes a hit or someone wastes hours chasing down a new “safe” address. That’s why Identity-Aware Proxy with stable numbers matters — it locks access by identity, while delivering a predictable, unchanging outbound IP your systems can trust. Identity-Aware Proxy stable numbers give you

Free White Paper

Single Sign-On (SSO) + IP Allowlisting / Denylisting: The Complete Guide

Architecture patterns, implementation strategies, and security best practices. Delivered to your inbox.

Free. No spam. Unsubscribe anytime.

That was the moment we knew IP-based access control had reached its breaking point. Static IP allowlists don’t match the way teams work today. Engineers move. Networks change. VPNs break. And every time, security takes a hit or someone wastes hours chasing down a new “safe” address. That’s why Identity-Aware Proxy with stable numbers matters — it locks access by identity, while delivering a predictable, unchanging outbound IP your systems can trust.

Identity-Aware Proxy stable numbers give you a fixed, controlled bridge between your protected services and the open internet. Instead of juggling IP changes from remote workers or cloud NAT gateways, you define one set — stable, reserved — and authorize all outgoing connections through it. Security teams keep clean firewall rules. Developers keep smooth API integrations. Nobody burns a day troubleshooting why a request just 403’d.

Without stable numbers, Identity-Aware Proxy is still powerful — user-based authentication, role-based access, and strong encryption — but integrations get messy. Webhooks break when source addresses drift. Third-party SaaS filters block legitimate calls. Even your own staging and prod can end up banning each other. Stable numbers fix all of that. They preserve trust between systems without reverting to insecure, guesswork-based controls.

Continue reading? Get the full guide.

Single Sign-On (SSO) + IP Allowlisting / Denylisting: Architecture Patterns & Best Practices

Free. No spam. Unsubscribe anytime.

The benefits go deeper. Compliance teams gain audit-friendly control points. Multi-cloud setups stop bleeding time over complex IP mapping. Zero Trust architectures stay pure without conceding to legacy network hacks. And onboarding new external services no longer means re-learning this week’s “current” egress IP range.

Identity-Aware Proxy stable numbers are not a luxury — they are baseline infrastructure for modern, distributed teams who still need predictable, authorized network behavior. They turn security policy into a visible, defendable constant. You don’t just secure your services. You stabilize them.

You can see this running live in minutes. Use Hoop.dev to set up an Identity-Aware Proxy with stable numbers, without rewiring your stack or choking your pipeline. Secure by identity. Predictable by design. Fast by default. Try it now and watch the problem disappear.

Open source

Save the open-source gateway for agent data access

Hoop is MIT-licensed infrastructure for controlling how AI agents reach production data. Star hoophq/hoop so you can inspect it, deploy it, or share it when your team starts governing agent access.

Star and save the repo →More posts