Allowing IP Addresses for Issue/Task Tracker Integrations

If you only allows specific IP addresses to access your Issue/Task Management Systems (eg Jira, Linear,..), you will have to allowlist Aikido's IP addresses so tasks can be created and managed.

Add the following IPs:

• 18.197.244.247

• 18.156.9.3

• 3.65.139.215

The ports required to be opened are at least port 443 for HTTPS.

Third party provider instructions

For instructions on adding IP addresses to allowlists with third-party providers, refer to the following resources:

• Cloudflare WAF

  • Cloudflare Turnstile does not support allowlisting specific client IP addresses. If you need to bypass Turnstile for Aikido scanning traffic, you must do it in your application code. We recommend bypassing only when both conditions are true:

    1. The request originates from an Aikido IP range

    2. The request includes the aikido User Agent in headers as described above

• Azure WAF

• AWS WAF.

  • For WAFs behind Application Load Balancers or CloudFront, your WAF should check the last IP address in the X-Forwarded-For header.

• Vercel WAF

  • Use the "bypass" action for trusted IPs

The IP address lists are also available as JSON arrays