QuotaGuard Shield

True End-to-End Encryption with SSL Passthrough

Yes.

Shield is purpose-built for regulated industries. Because we utilize SSL Passthrough, our infrastructure functions strictly as a "blind conduit."

We route your traffic without ever decrypting the payload or possessing your private keys.

This architecture satisfies the strict "transmission security" requirements of HIPAA, PCI-DSS, and SOC 2 by ensuring your data remains fully opaque to us from end-to-end.

No.

Unlike standard proxies that require you to hand over your certificates to terminate connections, Shield allows you to manage your SSL certificates entirely on your own infrastructure .

We use Server Name Indication (SNI) to route your traffic to the correct destination without ever needing to unwrap the encryption or store your private keys.

Reliability is standard. Every Shield subscription includes a load-balanced pair of static IP addresses by default.

If one node requires maintenance or experiences issues, traffic automatically fails over to the second node without interrupting your service.

This ensures high availability for mission-critical applications.

Yes.

Please check our page on "SSL Termination vs. SSL Offloading" and "Why Shield is More Secure than Static IP Proxies".

No.

To maximize security, you are not permitted to share your SSL certificates or private keys with QuotaGuard when using QG Shield.

By using Server Name Indication (SNI) to route your traffic, we eliminate the need to store your keys.

This prevents your data from being exposed even if our network were compromised, as we simply do not possess the keys required to decrypt and steal your traffic.

Absolutely. Shield is the ideal bridge for connecting dynamic infrastructure (like AI Agents, AWS Lambda, or Vapi) to restricted databases.

We provide a fixed static IP identity for your ephemeral agents, allowing you to safelist them on your corporate firewall or database without exposing your internal network to the open internet.