Static IPs for Cloud Apps, AI Agents, and Automation

Q: Do you sign Business Associate Agreements (BAAs)?

Yes, BAAs are available on all Shield plans. Contact our engineering team to initiate the BAA process before or during your trial.

Give your application a fixed outbound or inbound IP address so it can pass firewall allowlists, IP-based security checks, and vendor access controls. Trusted by 47,000+ engineers since 2013.

99.98% Historic Uptime

No Forced IP Changes in 12 Years

Billions of Requests Processed

Free Trial on Every Plan

Choose your product

QuotaGuard Static

Cloud apps, AI agents, and automation tools that need a fixed outbound or inbound IP to pass allowlists and firewall rules.

Best for: n8n, Zapier, Make, Render, Heroku, AWS Lambda, Kubernetes, Railway

$19/mo

per month, billed monthly

See Static Plans

QuotaGuard Shield

Apps that require end-to-end encryption, zero-knowledge certificate handling, and compliance readiness for HIPAA, PCI, and sensitive data flows.

Best for: Healthcare apps, fintech platforms, any app requiring a BAA

$29/mo

per month, billed monthly

See Shield Plans

QuotaGuard Static

Fixed outbound and inbound IPs for cloud apps and automation tools. All plans include a load-balanced pair of IPs for zero-downtime redundancy.

What every Static plan includes

Outbound and inbound proxy (both directions)
Load-balanced pair of static IPs
High availability and automated failover
Usage analytics dashboard
HTTP, HTTPS, and SOCKS5 protocol support
US or EU data residency
Email support from a North American engineering team
Free trial, no contract, cancel anytime
Soft limits usage policy ?We practice a soft limit policy that does NOT automatically cut customers off if they go over their limits. We ask customers to upgrade or chat with us to help diagnose why the account bandwidth or request usage was higher than expected.

Starter

For individual projects, AI workflows, and getting started

$19/mo

20,000 requests/month
10 GB bandwidth/month
Shared static IP pair
Email support

Start free trial

Free 3-day trial, then billed monthly.

Need more than 1M requests, 1TB bandwidth, or regional data restrictions?

Talk directly to an engineer who can design a custom architecture for your stack — including dedicated infrastructure, BAA agreements, and multi-region configurations.

Talk to an engineer →

Jump to Shield pricing ↓

↑ Jump to Static pricing

QuotaGuard Shield

End-to-end encrypted static IP proxy for HIPAA, PCI, and compliance-sensitive environments. SSL passthrough means your data is never decrypted at the proxy. Your certificates never leave your servers.

What every Shield plan includes

End-to-end SSL passthrough (data never decrypted at proxy)
Zero-knowledge certificate handling (keys stay with you)
HIPAA, PCI, and SOC2 compliance readiness
Business Associate Agreement (BAA) available
Outbound and inbound proxy (both directions)
Load-balanced pair of static IPs
High availability and automated failover
Usage analytics dashboard
HTTP, HTTPS, and SOCKS5 protocol support
US or EU data residency
Email support from a North American engineering team
Free trial, soft limits, no contract, cancel anytime ?We practice a soft limit policy that does NOT automatically cut customers off if they go over their limits. We ask customers to upgrade or chat with us to help diagnose why the account bandwidth or request usage was higher than expected.

Shield Starter

For compliance dev and test environments

$29/mo

20,000 requests/month
10 GB bandwidth/month
Shared static IP pair
Email support

Start free trial

Free 3-day trial, then billed monthly.

Need more than 1M requests, 1TB bandwidth, regional data restrictions, or a BAA before you evaluate?

Our engineering team will walk you through the compliance architecture, sign a BAA, and help you build a setup that passes your security review.

Talk to an engineer →

Migrating off Heroku?

We'll migrate your static IPs for you. Zero downtime.

Moving your app off Heroku? Your QuotaGuard IPs, configuration, and connection URL come with you. We do a hot swap on our end — no downtime, no changes to your allowlists, no interruptions to live traffic. Sign up directly, email support, and we handle the rest.

Read the migration guide → Or contact support to start your migration

AWS customers

Apply QuotaGuard to your committed AWS spend.

QuotaGuard is available on AWS Marketplace. If your organization has committed AWS spend, purchasing through Marketplace lets you apply that commitment to your QuotaGuard subscription.

View on AWS Marketplace →

Need help with your AWS Marketplace setup? Contact our engineering team

Compare Static Plans

Scroll to compare

Feature	Starter	Production	Business	Enterprise
Monthly Price	$19/mo	$49/mo	$89/mo	$219/mo
Monthly Requests	20,000	100,000	250,000	1,000,000
Bandwidth	10 GB	50 GB	200 GB	1 TB
IP Type	Shared pair	Shared pair	Shared pair	Dedicated pair
Outbound Proxy	✓	✓	✓	✓
Inbound Proxy	✓	✓	✓	✓
SSL Architecture	SSL Termination	SSL Termination	SSL Termination	SSL Termination
Protocols	HTTP/HTTPS/SOCKS5	HTTP/HTTPS/SOCKS5	HTTP/HTTPS/SOCKS5	HTTP/HTTPS/SOCKS5
Data Residency	US or EU	US or EU	US or EU	US or EU
High Availability	✓	✓	✓	✓
Usage Analytics	✓	✓	✓	✓
Soft Limit Policy	✓	✓	✓	✓
Support	Email	Email	Priority Email	Email + Phone
Setup Assistance	✓	✓	✓	✓
Compliance	GDPR/CCPA	GDPR/CCPA	GDPR/CCPA	GDPR/CCPA
Free Trial	✓	✓	✓	✓
	Start free trial	Start free trial	Start free trial	Start free trial

SSL Termination means traffic is decrypted at the QuotaGuard proxy and re-encrypted to the destination. This is the standard architecture for all Static plans and is suitable for the vast majority of use cases. For environments requiring end-to-end encryption where data must never be decrypted at the proxy, see QuotaGuard Shield.

Compare Shield Plans

Scroll to compare

Feature	Shield Starter	Shield Production	Shield Business	Shield Enterprise
Monthly Price	$29/mo	$59/mo	$109/mo	$259/mo
Monthly Requests	20,000	100,000	250,000	1,000,000
Bandwidth	10 GB	50 GB	200 GB	1 TB
IP Type	Shared pair	Shared pair	Shared pair	Dedicated pair
Outbound Proxy	✓	✓	✓	✓
Inbound Proxy	✓	✓	✓	✓
SSL Architecture	SSL Passthrough	SSL Passthrough	SSL Passthrough	SSL Passthrough
End-to-End Encryption	✓	✓	✓	✓
Certificate Handling	Zero-knowledge	Zero-knowledge	Zero-knowledge	Zero-knowledge
Protocols	HTTP/HTTPS/SOCKS5	HTTP/HTTPS/SOCKS5	HTTP/HTTPS/SOCKS5	HTTP/HTTPS/SOCKS5
Data Residency	US or EU	US or EU	US or EU	US or EU
High Availability	✓	✓	✓	✓
Usage Analytics	✓	✓	✓	✓
Soft Limit Policy	✓	✓	✓	✓
Compliance	HIPAA/PCI/SOC2	HIPAA/PCI/SOC2	HIPAA/PCI/SOC2	HIPAA/PCI/SOC2
BAA Available	✓	✓	✓	✓
Support	Email	Email	Priority Email	Email + Phone
Setup Assistance	✓	✓	✓	✓
Architecture Review	—	—	—	✓
Free Trial	✓	✓	✓	✓
	Start free trial	Start free trial	Start free trial	Start free trial

SSL Passthrough means traffic is never decrypted at the QuotaGuard proxy — encryption is end-to-end from your application to the destination. This is required for HIPAA, PCI, and zero-knowledge environments. SSL Termination (used by QuotaGuard Static) decrypts at the proxy and re-encrypts to the destination, which is suitable for most standard use cases. Learn more about SSL Termination vs. SSL Passthrough →

Common questions

If your application needs a fixed outbound or inbound IP to pass a firewall allowlist or IP-based security check, Static is almost always the right starting point. If your application handles protected health information, payment card data, or any data requiring end-to-end encryption and compliance documentation including a BAA, you need Shield. Not sure? Talk to an engineer and we'll tell you in one conversation.

No. All plans are month-to-month with no long-term contracts. You can cancel anytime directly from your dashboard. Every plan starts with a free trial — 3 days on standard plans, 7 days on Enterprise — so you can test the connection before your first charge.

No hard stops. We will not break your production app because you had a busy month. If you exceed your limit, we keep processing requests and reach out to discuss an upgrade that fits your growth.

No, unless you ask us to. In over 12 years of operation, we have never forced an IP change. We use permanently reserved IPs that persist through maintenance and failovers. Your allowlists are safe.

Yes. Upgrading or downgrading your plan does not change your assigned IP addresses. Your allowlists are unaffected.

For zero-downtime redundancy. We provide a primary and secondary static IP. If one node encounters an issue, our load balancer automatically routes traffic through the second IP so your app stays online.

An AWS NAT Gateway costs approximately $32/mo in base fees plus $0.045 per GB of data processed, plus engineering time to build and maintain it. For most teams, a managed QuotaGuard plan is faster to deploy, cheaper to operate, and eliminates the ongoing maintenance burden. The difference is most pronounced for teams without dedicated infrastructure engineers.

QuotaGuard adds minimal latency. For most use cases, the additional hop through our proxy infrastructure adds single-digit milliseconds. For AI agent workflows and automation tools making API calls to third-party services, this is not a meaningful performance factor.

All plans support HTTP, HTTPS, and SOCKS5. This covers the vast majority of use cases including standard API calls, database connections, SFTP, and SMTP.

SSL termination means traffic is decrypted at the QuotaGuard proxy and re-encrypted to the destination. This is standard for Static plans and suitable for most use cases. SSL passthrough means traffic is never decrypted at the proxy — encryption is end-to-end from your application to the destination. Shield uses SSL passthrough, which is required for HIPAA and PCI environments.

Yes, BAAs are available on Shield plans. Contact our engineering team to initiate the BAA process before or during your trial.

Yes. All plans support both US and EU data residency. You select your region during setup. If you need to change regions after setup, contact our engineering team.

QuotaGuard proxies run in every major AWS region so your traffic stays low-latency regardless of where your app is deployed. Covered regions include US-East-1 (N. Virginia), US-West-1 (Oregon), CA-Central-1 (Montreal), EU-West-1 (Ireland), EU-West-2 (London), EU-Central-1 (Frankfurt), AP-Northeast-1 (Tokyo), AP-Southeast-1 (Singapore), AP-Southeast-2 (Sydney), AP-South-1 (Mumbai), and SA-East-1 (São Paulo). You are automatically provisioned to the proxy closest to your application's region.

Real engineer support. We do not use chatbots. Our North American engineering team answers support emails personally, usually within a few hours. Phone support and dedicated setup assistance are included on Enterprise plans for both Static and Shield. You can reach us at support@quotaguard.com or by phone at 1-702-818-1043.

For most platforms, setup involves setting one environment variable and testing the connection. It takes most engineers under 15 minutes. More complex configurations involving QGTunnel for non-HTTP protocols typically take under an hour. Our engineering team is available if you hit any issues.

No. Shield uses SSL passthrough, which means your certificates never leave your servers. This is the core security advantage of Shield over Static. You do not share keys or certificates with QuotaGuard.

Yes. Direct billing through quotaguard.com starts at $19/mo for Static and $29/mo for Shield. Your static IPs will be the same whether you are on Heroku or direct. Migration takes less than 5 minutes. Questions about migrating? Talk to an engineer.

Fixed IPs. Zero maintenance. Ready in minutes.

Over a decade of production reliability. 47,000+ engineers trust QuotaGuard to keep their allowlists stable and their apps connected.

Start free trial Talk to an engineer

Questions before signing up? Email support@quotaguard.com or call 1-702-818-1043

Free trial on every plan

No forced IP changes in 12 years

Cancel anytime from your dashboard

↑ Top