A lightweight CASB for your SaaS apps

Route GitHub, Slack, Snowflake, and more through Gateways you run, then lock each app to their IP addresses. Every session follows your policies and is logged for audit.

Get started for freeBook a demo

Minutes, not months

Lock any app to your Gateways

  1. 1

    Route the app

    Add a DNS Resource for the app, like **.github.com, in the Site where your Gateways run.

    Resources/Add Resource

    Type

    DNS

    Address

    **.github.com

    Site

    SaaS connectors

    Traffic Restrictions

    TCP 443

  2. 2

    Allowlist your Gateways

    Add each Gateway’s public IP to the app’s IP allowlist. Requests from anywhere else are turned away.

    IP allow listEnabled
    • 203.0.113.10Firezone Gateway, Frankfurt
    • 198.51.100.24Firezone Gateway, Virginia
  3. 3

    Grant access

    Assign the Resource to the Groups that need it with a Policy.

    Policies/Add Policy

    EngineeringGitHubDNS
  4. 4

    Done

    Access follows your policies, and every connection is logged for audit.

    Logs/Flow Logs

    OpenedActorDuration
    09:41Dana Whitfield12m
    09:38Mei Tanaka4m
    09:22Marcus Reyes31m

Fast everywhere

A Gateway in every region

Deploy Gateways where your users work, all in one Site, and add each one’s IP to the allowlist. Firezone routes every user through the closest Gateway, so apps stay fast.

SaaS connectorsSite5 Gateways · Online

On the list, or off limits.

Route the SaaS your team relies on through Gateways you control, and log every session for audit.

Get started for freeRead the setup guide