- 1 dedicated IP address
- 10 devices
- 5 open ports
- 100 GBbandwidth
- 20 Mbpsspeed
GetAStatic is a WireGuard VPN with your own fixed IPv4, from $2/mo. Install it on the machine that needs access. Its traffic then always comes from that IP, so you add it to the allowlist once and stop updating it.
Not affiliated with NordLayer or GoodAccess. Prices as listed on their sites, checked 2026-10-06.
Updated
Business VPNs sell a dedicated IP as a team gateway with a minimum number of users. If you are one person, or a small team, you pay for seats you do not use.
| Feature | NordLayer | GoodAccess | GetAStatic |
|---|---|---|---|
| Price | $11/user + $40/mo IP | $7/user + $49/mo IP | From $2/mo, IP included |
| Minimum users | 5 | 5 | 1 |
| Own dedicated IP | Yes (team gateway) | Yes (team gateway) | Yes, in every plan |
| Inbound ports | Egress only | Egress only | 5 on Plus, unlimited on Pro |
| Setup | Team admin console, then apps | Team admin console, then apps | One WireGuard config |
NordLayer and GoodAccess are built for larger teams. Their price is per user plus a monthly dedicated IP or gateway fee; GoodAccess bills seats annually.
Many systems only let in traffic from addresses on a list: an AWS security group, a GitHub or GitLab IP allow list, a company firewall or VPN gateway, a database firewall, a bank, or the admin panel of a SaaS tool.
Home internet gets a new IP from time to time, often after a router restart. On a laptop the IP changes every time you change networks. Each change locks you out until someone edits the list again. Adding your ISP's whole range is not a fix: it lets in thousands of strangers.
Plus for light use, Pro for most people, Ultra for full gigabit.
5× speed · 10× bandwidth · 2 IPs — only $2/mo more
GetAStatic gives you a dedicated public IPv4. You install the WireGuard app on the computer that needs access and import the config we generate. The device dials out to our node, and all of its internet traffic then leaves from your IP.
Give that IP to whoever manages the allowlist, one time. In AWS and most firewalls it goes in as a single address, written YOUR-IP/32 (steps for AWS and database allowlists). After that, the location of the machine does not matter: home, a hotel or a hotspot all look the same to the system on the other side.
You do not need to open any ports. An allowlist only checks your outgoing traffic, so every inbound port stays closed and nothing on the device can be reached from the internet.
Leave the ports page alone: zero open ports means nothing is exposed.
Yes, if they share a network: run WireGuard on the office or home router (OpenWrt, pfSense, OPNsense, MikroTik or GL.iNet) and every device behind it uses the IP. If people work from different places, give each person their own IP: Pro includes 2, and each extra IP is $2/mo.
Usually, yes. Your device starts the connection, so the network does not need to allow anything special. If a network blocks WireGuard, switch that IP to AmneziaWG in the dashboard; it is harder to detect and block.
No. The IP is yours for as long as you keep the plan. If a payment fails, the tunnel keeps working for a 5-day grace period, then pauses, and we hold a paid account's IP for at least 30 days so you can keep it.
No. Business VPNs sell a dedicated IP as a team gateway, often with a minimum of 5 users. GetAStatic gives one person their own dedicated IPv4 from $2/mo, with the VPN included and no seat minimum.
It stays yours until the end of the paid period. Then it goes back to our pool and can go to a new customer, so remove it from every allowlist before you leave.
Have more questions? See the full FAQ →