Requesty Adds IP Allowlisting to Limit Leaked API Keys

Key Info

Requesty introduced a new Allowed IPs feature that restricts gateway access to a configured list of IPv4 addresses and CIDR ranges per organization.

Highlights

• Requests from any address outside the allowlist are rejected on every endpoint.
• The feature is positioned as a way to make a leaked API key useless outside your network.
• Every change to the allowlist is recorded in the audit trail.
• Configuration is per organization, covering both single IPv4 addresses and CIDR ranges.