Skip to main content
All CollectionsKeeping secure
Which URLs do our security team need to allow in order to use Beacon?
Which URLs do our security team need to allow in order to use Beacon?

Domains we recommend allowlisting

Updated over 2 months ago

Beacon is a cloud-based system, which means that all Beacon resources are provided via the web.

If your organisation implements firewalls internally, it's possible that some Beacon services (or those that integrate with Beacon) might be blocked.

Below are the domains that we recommend allowing:

  • *.beaconcrm.org

  • *.beaconproducts.co.uk

  • *.beaconforms.com

  • *.cloudfront.net

  • fonts.googleapis.com

  • *.google.com

  • api.mapbox.com

  • *.segment.com

  • *.stripe.com

  • *.gocardless.com

  • *.gstatic.com

  • *.pusher.com

  • *.intercom.io

  • *.intercomcdn.com

  • www.paypalobjects.com

  • *.paypal.com

  • *.filestackapi.com

You might have heard people use the terms 'whitelist' or 'blacklist' when talking about cyber security. We use the industry standard terms 'allow list' and 'deny list'. If you'd like to learn more about the importance these terms, check out this blog from the National Cyber Security Centre.

Did this answer your question?