47,000+
Engineers and teams served
12 years
In production without forced IP changes
99.98%
Historic uptime
0
Chatbots. Support from engineers.
The QuotaGuard team clearly cares about their product and their customers. The product is straightforward in its design and it worked well with my use case on Heroku/MongoDB Atlas. It enabled me to set up static IP addresses for additional database security, and I was able to easily add the IP addresses to MongoDB Atlas.
Gayle M., Software Engineer, Health, Wellness & Fitness · ★★★★★ Capterra
Working with QuotaGuard has been great. They have responsive customer service and have given immediate, thorough and technical solutions to all of our questions.
Ben S., Co-Founder, Computer Software · ★★★★★ Capterra
Migrating off Heroku?
We'll migrate your static IPs for you. Zero downtime.
Moving your app off Heroku? Your QuotaGuard IPs, configuration, and connection URL come with you. We do a hot swap on our end, no downtime, no changes to your allowlists, no interruptions to live traffic. Sign up directly, email support, and we handle the rest.
AWS customers
Apply QuotaGuard to your committed AWS spend.
QuotaGuard is available on AWS Marketplace. If your organization has committed AWS spend, purchasing through Marketplace lets you apply that commitment to your QuotaGuard subscription.
Need help with your AWS Marketplace setup? Contact our engineering teamCompare Static Plans
Scroll to compare
| Feature | Starter | Production | Business | Enterprise |
|---|---|---|---|---|
| Monthly Price | $19/mo | $49/mo | $89/mo | $219/mo |
| Best Fit | Individual projects, AI workflows, and early testing | Production apps with daily API calls and database connections | Scaling teams that need higher usage limits | Teams that need dedicated IPs, dedicated proxy resources, and phone/video support |
| Infrastructure Type | Shared infrastructure | Shared infrastructure | Shared infrastructure | Dedicated infrastructure |
| IP Assignment | Shared static IP pair | Shared static IP pair | Shared static IP pair | Dedicated static IP pair |
| Proxy Resources | Shared proxy resources | Shared proxy resources | Shared proxy resources | Dedicated proxy resources |
| Monthly Requests | 20,000 | 100,000 | 250,000 | 1,000,000 |
| Bandwidth | 10 GB | 50 GB | 200 GB | 1 TB |
| Free Trial | 3 days | 3 days | 3 days | 7 days |
| Outbound Proxy | ✓ | ✓ | ✓ | ✓ |
| Inbound Proxy | ✓ | ✓ | ✓ | ✓ |
| SSL Architecture | SSL Termination | SSL Termination | SSL Termination | SSL Termination |
| Protocols | HTTP/HTTPS/SOCKS5 | HTTP/HTTPS/SOCKS5 | HTTP/HTTPS/SOCKS5 | HTTP/HTTPS/SOCKS5 |
| Data Residency | US or EU | US or EU | US or EU | US or EU |
| High Availability | ✓ | ✓ | ✓ | ✓ |
| Usage Analytics | ✓ | ✓ | ✓ | ✓ |
| Soft Limit Policy | ✓ | ✓ | ✓ | ✓ |
| Support | Priority Email | Email + phone/video | ||
| Setup Help | Email setup assistance | Email setup assistance | Priority email setup assistance | Phone/video setup, dedicated assistance, and architecture review |
| Compliance | GDPR/CCPA | GDPR/CCPA | GDPR/CCPA | GDPR/CCPA |
| Start free trial | Start free trial | Start free trial | Start free trial |
SSL Termination means traffic is decrypted at the QuotaGuard proxy and re-encrypted to the destination. This is standard managed proxy behavior and is suitable for many API, automation, and database allowlist use cases where end-to-end TLS passthrough is not required. For environments requiring end-to-end encryption where data must never be decrypted at the proxy, see QuotaGuard Shield.
Compare Shield Plans
Scroll to compare
| Feature | Shield Starter | Shield Production | Shield Business | Shield Enterprise |
|---|---|---|---|---|
| Monthly Price | $29/mo | $59/mo | $109/mo | $259/mo |
| Best Fit | Compliance dev and test environments | Production healthcare, fintech, and sensitive-data applications | Scaling compliance-sensitive apps that need higher usage limits | High-volume compliance environments that need dedicated IP isolation and architecture review |
| Infrastructure Type | Shared infrastructure | Shared infrastructure | Shared infrastructure | Dedicated infrastructure |
| IP Assignment | Shared static IP pair | Shared static IP pair | Shared static IP pair | Dedicated static IP pair |
| Proxy Resources | Shared proxy resources | Shared proxy resources | Shared proxy resources | Dedicated proxy resources |
| Monthly Requests | 20,000 | 100,000 | 250,000 | 1,000,000 |
| Bandwidth | 10 GB | 50 GB | 200 GB | 1 TB |
| Free Trial | 3 days | 3 days | 3 days | 7 days |
| Outbound Proxy | ✓ | ✓ | ✓ | ✓ |
| Inbound Proxy | ✓ | ✓ | ✓ | ✓ |
| SSL Architecture | SSL Passthrough | SSL Passthrough | SSL Passthrough | SSL Passthrough |
| End-to-End Encryption | ✓ | ✓ | ✓ | ✓ |
| Certificate Handling | Zero-knowledge | Zero-knowledge | Zero-knowledge | Zero-knowledge |
| Protocols | HTTP/HTTPS/SOCKS5 | HTTP/HTTPS/SOCKS5 | HTTP/HTTPS/SOCKS5 | HTTP/HTTPS/SOCKS5 |
| Data Residency | US or EU | US or EU | US or EU | US or EU |
| High Availability | ✓ | ✓ | ✓ | ✓ |
| Usage Analytics | ✓ | ✓ | ✓ | ✓ |
| Soft Limit Policy | ✓ | ✓ | ✓ | ✓ |
| Compliance Support | HIPAA/PCI-ready architecture, SOC2 vendor-review support | HIPAA/PCI-ready architecture, SOC2 vendor-review support | HIPAA/PCI-ready architecture, SOC2 vendor-review support | HIPAA/PCI-ready architecture, SOC2 vendor-review support |
| BAA Available | For qualifying Shield customers | For qualifying Shield customers | For qualifying Shield customers | For qualifying Shield customers |
| Support | Priority Email | Email + phone/video | ||
| Setup Help | Email setup assistance | Email setup assistance | Priority email setup assistance | Phone/video setup, dedicated assistance, and architecture review |
| Start free trial | Start free trial | Start free trial | Start free trial |
SSL Passthrough means traffic is never decrypted at the QuotaGuard proxy. Encryption is end-to-end from your application to the destination. This is required for HIPAA, PCI, and zero-knowledge environments. SSL Termination used by QuotaGuard Static decrypts at the proxy and re-encrypts to the destination, which is suitable for most standard use cases. Learn more about SSL Termination vs. SSL Passthrough →
Common questions
If your application needs a fixed outbound or inbound IP to pass a firewall allowlist or IP-based security check, Static is almost always the right starting point. If your application handles protected health information, payment card data, or any data requiring end-to-end encryption and compliance documentation including a BAA, you need Shield. Shield is also appropriate for teams that simply do not want TLS traffic decrypted at the proxy. Not sure? Talk to an engineer and we'll tell you in one conversation.
No. All plans are month-to-month with no long-term contracts. You can cancel anytime directly from your dashboard. Every plan starts with a free trial, 3 days on standard plans and 7 days on Enterprise, so you can test the connection before your first charge.
We use soft limits so a brief spike does not automatically break production traffic. If usage materially exceeds the plan limits, we will contact you about upgrading or right-sizing the account. Soft limits are a courtesy for unexpected spikes, not a way to run sustained traffic above the paid plan.
No, unless you ask us to. In over 12 years of operation, we have never forced an IP change. We use permanently reserved IPs that persist through maintenance and failovers. Your allowlists are safe.
Yes. Upgrading or downgrading your plan does not change your assigned IP addresses. Your allowlists are unaffected.
Starter, Production, and Business plans use shared static IP pairs and shared proxy resources. Enterprise plans include dedicated IPs and proxy resources reserved for your account. Dedicated infrastructure is best for higher-volume teams, stricter internal security requirements, or customers who want additional infrastructure isolation.
For zero-downtime redundancy. We provide a primary and secondary static IP. If one node encounters an issue, our load balancer automatically routes traffic through the second IP so your app stays online.
In common AWS regions, NAT Gateway pricing is roughly $32/mo in base fees plus $0.045 per GB of data processed, plus the engineering time to build and maintain it. For most teams, a managed QuotaGuard plan is faster to deploy, cheaper to operate, and eliminates the ongoing maintenance burden. The difference is most pronounced for teams without dedicated infrastructure engineers.
QuotaGuard adds minimal latency. For most use cases, the additional hop through our proxy infrastructure adds single-digit milliseconds. For AI agent workflows and automation tools making API calls to third-party services, this is not a meaningful performance factor.
All plans support HTTP, HTTPS, and SOCKS5. This covers the vast majority of use cases including standard API calls, database connections, SFTP, and SMTP.
SSL termination means traffic is decrypted at the QuotaGuard proxy and re-encrypted to the destination. This is standard managed proxy behavior and is suitable for many API, automation, and database allowlist use cases where end-to-end TLS passthrough is not required. SSL passthrough means traffic is never decrypted at the proxy. Encryption is end-to-end from your application to the destination. Shield uses SSL passthrough, which is required for HIPAA, PCI, and zero-knowledge environments.
BAAs are available for qualifying Shield customers. Contact our engineering team to review your use case and initiate the BAA process.
Yes. All plans support both US and EU data residency. You select your region during setup. If you need to change regions after setup, contact our engineering team.
QuotaGuard proxies run in multiple major AWS regions. Our proxy infrastructure currently runs in 10 AWS regions, including US-East-1 (N. Virginia), US-West-1 (Oregon), CA-Central-1 (Montreal), EU-West-1 (Ireland), EU-Central-1 (Frankfurt), AP-Northeast-1 (Tokyo), AP-Southeast-1 (Singapore), AP-Southeast-2 (Sydney), AP-South-1 (Mumbai), and SA-East-1 (São Paulo). Customers choose their preferred region at signup and can request a region change through support at any time.
Real engineer support. We do not use chatbots. Our North American engineering team answers support emails personally, usually within a few hours. Starter and Production include email setup assistance. Business includes priority email setup assistance. Enterprise includes phone/video support, dedicated setup assistance, and architecture review. You can reach us at support@quotaguard.com or by phone at 1-702-818-1043.
For most platforms, setup involves setting one environment variable and testing the connection. It takes most engineers under 15 minutes. More complex configurations involving QGTunnel for non-HTTP protocols typically take under an hour. Our engineering team is available if you hit any issues.
No. Shield uses SSL passthrough, which means your certificates never leave your servers. This is the core security advantage of Shield over Static. You do not share keys or certificates with QuotaGuard.
Yes. Direct billing through quotaguard.com starts at $19/mo for Static and $29/mo for Shield. Your static IPs will be the same whether you are on Heroku or direct. Migration takes less than 5 minutes. Questions about migrating? Talk to an engineer.
Fixed IPs. Managed infrastructure. Ready in minutes.
Over a decade of production reliability. 47,000+ engineers trust QuotaGuard to keep their allowlists stable and their apps connected.
Questions before signing up? Email support@quotaguard.com or call 1-702-818-1043
Free trial on every plan
No forced IP changes in 12 years
Cancel anytime from your dashboard