Secure Heroku Static IP's for Inbound/Outbound Routing - SSL/ACM for PCI/HIPAA. Starting at ~$0/hour.
Enterprise-grade static IP solution with advanced security layers built in. Route your inbound AND outbound traffic through dedicated, secured static IPs that protect against common attack vectors. Perfect for regulated industries, financial services, healthcare, or any application handling sensitive data. QuotaGuard Shield goes beyond basic static IPs - it’s a complete security perimeter for your Heroku apps.
Certificates can be managed at each end point, with your own certificates (for example, from LetsEncrypt) or using Heroku’s ACM. You no longer have to configure your certificates on the QuotaGuard dashboard. Shield is fully configurable without having to get QuotaGuard Support involved, which allows you to set up your service securely and be running in minutes. Need custom certificate chains? Client certificate authentication? We handle it all seamlessly.
Inbound proxy uses SSL passthrough - not SSL termination at each end point - to provide end to end security for your application traffic. Your encrypted data stays encrypted through our entire infrastructure. No man-in-the-middle vulnerabilities, no SSL inspection, just pure secure tunneling. Perfect for PCI compliance and sensitive data transmission requirements.
We provide a load balanced pair of IP addresses so if one IP fails, traffic will automatically route through your second IP with health checks and automated failover. We also offer dedicated IP addresses, if desired, as an option to provide more reliability and security. Shield’s failover and advanced health monitoring detects issues faster than standard solutions.
We support ALL proxy protocols: HTTP, HTTPS via CONNECT, and SOCKS5. Translation: you can route literally any database traffic through our static IPs. PostgreSQL behind a corporate firewall? ✅ MongoDB Atlas with IP restrictions? ✅ Oracle database that only trusts specific IPs? ✅ If it uses TCP, we can proxy it.
You will automatically be provisioned to the proxy in your app region for ultra low latency. Same data center as your Heroku dynos = virtually zero added latency.
Our proxies run on all Heroku regions including US-East-1 (N. Virginia), US-West-1 (Oregon), CA-Central-1 (Montreal), EU-West-1 (Ireland), EU-West-2 (London), EU-Central-1 (Frankfurt), AP-Northeast-1 (Tokyo), AP-Southeast-1 (Singapore), AP-Southeast-2 (Sydney), AP-South-1 (Mumbai) and SA-East-1 (Sau Paulo) Amazon regions.
We pick up the phone. We debug connectivity issues. We answer emails. We help create solutions to unique use cases. We do live online chat. We do one-on-one setup assistance. Don’t believe the hype? Just call us (1-702-818-1043), send us an email (support@quotaguard.com) and see for yourself.
Instant provisioning of our HTTPS proxies. Most languages require only a few lines of config code to start routing through your static IPs. Get up and running with our sample code in minutes. Python, Ruby, Node.js, Java, PHP, Go - we support them all. Shield includes advanced configuration options for enterprise needs while keeping basic setup dead simple.
As of Q2 2025, QuotaGuard has served over 31,247 Heroku customers since starting as an Add-on in 2013. Almost a decade ago, QuotaGuard worked with Heroku to create the most flexible and secure Static IP solution for Hobby through Enterprise customers. With our cloud Static IP and our Shield Secure Static IP solution, we’ve processed billions of requests through our secure Static IP proxies. QuotaGuard’s service continues to grow as the most recommended and trusted cloud-based Static IP vendor on Heroku, AWS, Azure, IBM, and GCP.
With the hassle free certificate management, your data is more secure because no outside parties - including QuotaGuard - need to decrypt or re-encrypt any data as it traverses your proxies. Shield uses military-grade encryption throughout the entire data path. Perfect for HIPAA compliance, financial data, or any scenario where data must remain encrypted end-to-end. Zero-knowledge architecture means we can’t see your data even if we wanted to.
QuotaGuard Shield simplifies the compliance requirements for applications operating in highly regulated industries. Use QuotaGuard Shield for PCI and HIPAA compliant apps in regulated industries, such as medical/healthcare, financial services, and life sciences. Pre-configured to meet compliance requirements out of the box.
Dedicated IP addresses, if desired, are available for Enterprise plans and above. Please contact our Support with your QuotaGuard Static username and requested region to get a dedicated IP address setup. Your dedicated IPs are exclusively yours - no shared infrastructure, no noisy neighbors, complete isolation. Perfect for whitelisting with banks, payment processors, or government systems that require consistent, dedicated IPs.
The same team that has operated QuotaGuard and QuotaGuard Static since 2013 also designed and operates QuotaGuard Shield. We took the best practices of our other QuotaGuard products and applied it to our QuotaGuard Shield service so we can continue to deliver uptime of over 99.98%, just like we have since we started. We gracefully scale with your business needs, and with over 8,700 active customers, we successfully route millions of requests per day on our platforms.
Need to upgrade or downgrade? Don’t worry, your IP Addresses will never change when you change your usage plan. Hassle free cancellation, no long term commitments or annoying phone calls with sales reps to terminate your service.
Want to know more about your Privacy rights, GDPR, CCPA, and what happens with your data on QuotaGuard? Then please review our Privacy Policy and GDPR FAQ’s in the QuotaGuard Static Documentation section below to find out more, or simply contact us at Support for specific questions.
Track your requests and usage in real time via our dashboard. We retain 12 months of data so you can monitor trends in your usage and plan accordingly. Export everything for your security audits.
The available application locations for this add-on are shown below, and depend on whether the application is deployed to a Common Runtime region or Private Space. Learn More
Region | Available |
---|---|
United States | Available |
Europe | Available |
Region | Available | Installable in Space |
---|---|---|
Dublin | Available | |
Frankfurt | Available | |
London | Available | |
Montreal | Available | |
Mumbai | Available | |
Oregon | Available | |
Singapore | Available | |
Sydney | Available | |
Tokyo | Available | |
Virginia | Available |
Need a larger plan? Let our customer success team help! Learn more.
To provision, copy the snippet into your CLI or use the install button above.
Privacy: https://www.quotaguard.com/privacy