A static IP for IP whitelisting

GetAStatic is a WireGuard VPN with your own fixed IPv4, from $2/mo. Install it on the machine that needs access. Its traffic then always comes from that IP, so you add it to the allowlist once and stop updating it.

Not affiliated with NordLayer or GoodAccess. Prices as listed on their sites, checked 2026-10-06.

Instant setup US-based IP

Updated

Compare

Cost for one person

Business VPNs sell a dedicated IP as a team gateway with a minimum number of users. If you are one person, or a small team, you pay for seats you do not use.

FeatureNordLayerGoodAccessGetAStatic
Price$11/user + $40/mo IP$7/user + $49/mo IPFrom $2/mo, IP included
Minimum users551
Own dedicated IPYes (team gateway)Yes (team gateway)Yes, in every plan
Inbound portsEgress onlyEgress only5 on Plus, unlimited on Pro
SetupTeam admin console, then appsTeam admin console, then appsOne WireGuard config

NordLayer and GoodAccess are built for larger teams. Their price is per user plus a monthly dedicated IP or gateway fee; GoodAccess bills seats annually.

The problem

Your IP changes, the allowlist does not

Many systems only let in traffic from addresses on a list: an AWS security group, a GitHub or GitLab IP allow list, a company firewall or VPN gateway, a database firewall, a bank, or the admin panel of a SaaS tool.

Home internet gets a new IP from time to time, often after a router restart. On a laptop the IP changes every time you change networks. Each change locks you out until someone edits the list again. Adding your ISP's whole range is not a fix: it lets in thousands of strangers.

Pricing

Choose your plan

Plus for light use, Pro for most people, Ultra for full gigabit.

Plus
$2/mo

 

  • 1 dedicated IP address
  • 10 devices
  • 5 open ports
  • 100 GBbandwidth
  • 20 Mbpsspeed
Ultra
$10/mo

 

  • 2 dedicated IP addresses
  • Unlimited devices
  • Unlimited open ports
  • 5 TBbandwidth
  • 1 Gbpsspeed
  • Inbound + outbound access
  • Instant activation
  • 7-day money-back guarantee
  • Cancel anytime
Add-ons, per IP addressCustom hostname $5·Addtl. IP $2/mo (Ultra $7/mo)·Gigabit Speed (Plus & Pro) $5/mo·SMTP $25
Why use GetAStatic?

Why use GetAStatic for an allowlist

  • One dedicated IPv4 that is yours alone, not shared with other customers
  • The same IP from home, a café, a hotel or a phone hotspot
  • No inbound ports needed: every port stays closed, so nothing is exposed
  • From $2/mo, and Pro includes 2 IPs
How it works

Send one machine's traffic through one fixed IP

GetAStatic gives you a dedicated public IPv4. You install the WireGuard app on the computer that needs access and import the config we generate. The device dials out to our node, and all of its internet traffic then leaves from your IP.

Give that IP to whoever manages the allowlist, one time. In AWS and most firewalls it goes in as a single address, written YOUR-IP/32 (steps for AWS and database allowlists). After that, the location of the machine does not matter: home, a hotel or a hotspot all look the same to the system on the other side.

You do not need to open any ports. An allowlist only checks your outgoing traffic, so every inbound port stays closed and nothing on the device can be reached from the internet.

Setup

Set it up in a few minutes

  1. Choose a plan and sign up. Your new IP shows in the dashboard.
  2. Download the WireGuard config for that IP.
  3. Install WireGuard on the machine that needs access, import the config and turn the tunnel on.
  4. Open any what-is-my-IP site. It should show your new IP.
  5. Add YOUR-IP/32 to the allowlist, or send it to the admin who manages it. Then remove the old entries.

Leave the ports page alone: zero open ports means nothing is exposed.

Good to know

Before you buy

  • By default the whole device uses the IP: all of its internet traffic goes through the tunnel.
  • It is a datacenter IP in Kansas City, Missouri or San Jose, California, not a home IP. Some fraud and risk systems treat datacenter IPs differently. Banks usually accept them, but one may ask for an extra check.
  • Traffic goes through Kansas City, Missouri or San Jose, California. If you are far from the IP's city, expect added latency on every connection.
  • One config runs on one device or router at a time; on a router, every device behind it shares the IP. For more machines with their own IPs, Pro includes 2, and an extra IP is $2/mo.
FAQ

Questions, answered.

01Can several people share one IP?

Yes, if they share a network: run WireGuard on the office or home router (OpenWrt, pfSense, OPNsense, MikroTik or GL.iNet) and every device behind it uses the IP. If people work from different places, give each person their own IP: Pro includes 2, and each extra IP is $2/mo.

02Does it work on hotel or airport Wi-Fi?

Usually, yes. Your device starts the connection, so the network does not need to allow anything special. If a network blocks WireGuard, switch that IP to AmneziaWG in the dashboard; it is harder to detect and block.

03Will my IP ever change?

No. The IP is yours for as long as you keep the plan. If a payment fails, the tunnel keeps working for a 5-day grace period, then pauses, and we hold a paid account's IP for at least 30 days so you can keep it.

04Do I need a business VPN for one person?

No. Business VPNs sell a dedicated IP as a team gateway, often with a minimum of 5 users. GetAStatic gives one person their own dedicated IPv4 from $2/mo, with the VPN included and no seat minimum.

05What happens to the IP if I cancel?

It stays yours until the end of the paid period. Then it goes back to our pool and can go to a new customer, so remove it from every allowlist before you leave.

Have more questions? See the full FAQ →