Built by operators. For startups that can't outspend the problem.

Most breaches start with abused access.

We've spent twenty years building products in the application network security space. DNS filtering, web application firewall, log management, threat intelligence. The pattern that shows up over and over: the initial vector is almost always an exploited access path. A leaked SSH key. A stolen admin token. A staging URL someone forgot to gate. An over-broad allowlist nobody pruned.

So we put a lot of energy into shrinking that attack surface. IPAuth is one piece of that. A small, focused tool that makes "lock this service to one IP" feel like a single bookmark click instead of a 30-minute manual edit every time you switch networks. It's a critical layer in our own defense-in-depth strategy, and we built it because the existing options felt either too heavy or too tied to a single vendor.

The big players have great answers. They just don't fit us.

Cloudflare Access, Cisco Umbrella SIG, Zscaler, Okta Workforce, Tailscale Enterprise, 1Password Business. These are excellent products built by excellent teams, and they serve the customers they were designed for very well. But as technical founders running lean startups, we can't always swallow the per-seat math, the multi-year contracts, the vendor-lock surface area, or the integration overhead that comes with adopting a full identity-and-access platform when what we needed was "keep my SSH port closed except to me, today, from a coffee shop."

So we build creative solutions. IPAuth is two URLs and a bookmark. It's free. It works with the firewall, CDN, or WAF you already pay for. It doesn't require an account or an agent. You can self-host the whole thing if you want. The code is straightforward PHP. And it composes with everything else in our stack.

Defense-in-depth doesn't have to mean defense-in-budget. Sometimes the right answer is a script and a cron entry.

Two technical founders. Twenty years in the trenches.

We co-founded Sucuri (a website security platform) and sold it to GoDaddy in 2017. Tony stayed on for three years as GM running GoDaddy's portfolio of security solutions, including the PKI business, before stepping back into the startup world. Everything we ship now is informed by that arc: what works at scale, what gets in the way, what enterprise customers actually need versus what they're sold.

IPAuth is one of many tools we've built.

Over the years we've shipped a number of solutions: DNS filtering, web application firewall, log management, threat intelligence, network testing. All built with the same constraints: small teams, real production traffic, no enterprise budget. If you're running infra at a startup scale, you might find the others useful too.

All of these live under the NetSecOps umbrella. IPAuth is free and stays free.

Try it. It's free.

Two URLs. One bookmark. Your firewall stays current as you move.