Network requirements

This page lists all external URLs and endpoints that Cysmiq connects to. Use this to configure firewall rules and network policies.

For KOTS/Replicated installer network requirements, see Replicated network requirements.

Core infrastructure

These endpoints are required for Cysmiq to function.

Host	Port	Protocol	Purpose
`nexus.cysmiq.com`	443	HTTPS	Core cloud service

Version control systems

Required based on which VCS integrations you use.

Host	Port	Protocol	Purpose
`github.com`	443	HTTPS	GitHub web and OAuth
`api.github.com`	443	HTTPS	GitHub REST API
`gitlab.com`	443	HTTPS	GitLab web and API
`bitbucket.org`	443	HTTPS	Bitbucket Cloud web and OAuth
`api.bitbucket.org`	443	HTTPS	Bitbucket Cloud API

If using GitHub Enterprise Server or self-hosted GitLab, add those custom URLs as well.

Ticketing integrations

Required based on which ticketing systems you integrate with.

Host	Port	Protocol	Purpose
`api.linear.app`	443	HTTPS	Linear GraphQL API
`*.atlassian.net`	443	HTTPS	Jira Cloud API

For Jira, the specific subdomain depends on your Jira instance (e.g., yourcompany.atlassian.net).

Compliance integrations

Required based on which compliance integrations you use.

Host	Port	Protocol	Purpose
`app.vanta.com`	443	HTTPS	Vanta OAuth authorization
`api.vanta.com`	443	HTTPS	Vanta API

Analytics and monitoring

Optional services for analytics and error tracking.

Host	Port	Protocol	Purpose
`app.posthog.com`	443	HTTPS	PostHog analytics
`*.ingest.sentry.io`	443	HTTPS	Sentry error tracking
`api.newrelic.com`	443	HTTPS	New Relic monitoring

These are optional and depend on your configuration.

User avatars

Used for displaying user profile images.

Host	Port	Protocol	Purpose
`www.gravatar.com`	443	HTTPS	Gravatar profile images

Secret verification providers

These endpoints are contacted only when verifying leaked secrets. They are optional and only used when the corresponding secret type is detected and verification is enabled.

AI and ML services

Host	Port	Protocol	Purpose
`api.openai.com`	443	HTTPS	OpenAI API key verification
`api.anthropic.com`	443	HTTPS	Anthropic API key verification
`api.ai21.com`	443	HTTPS	AI21 API key verification
`api.assemblyai.com`	443	HTTPS	AssemblyAI API key verification
`api.cohere.com`	443	HTTPS	Cohere API key verification
`api.deepseek.com`	443	HTTPS	DeepSeek API key verification
`api.groq.com`	443	HTTPS	Groq API key verification
`cloud.langfuse.com`	443	HTTPS	Langfuse API key verification
`us.cloud.langfuse.com`	443	HTTPS	Langfuse API key verification
`api.mistral.ai`	443	HTTPS	Mistral AI API key verification
`openrouter.ai`	443	HTTPS	OpenRouter API key verification
`api.perplexity.ai`	443	HTTPS	Perplexity API key verification
`api.replicate.com`	443	HTTPS	Replicate API key verification
`api.tavily.com`	443	HTTPS	Tavily API key verification

Cloud infrastructure

Host	Port	Protocol	Purpose
`sts.amazonaws.com`	443	HTTPS	AWS credential verification
`api.cloudflare.com`	443	HTTPS	Cloudflare API/CA/Global key verification
`api.digitalocean.com`	443	HTTPS	DigitalOcean token verification
`api.aiven.io`	443	HTTPS	Aiven token verification
`api.heroku.com`	443	HTTPS	Heroku API key verification
`api.vercel.com`	443	HTTPS	Vercel token verification
`api.netlify.com`	443	HTTPS	Netlify token verification
`api.fastly.com`	443	HTTPS	Fastly API key verification
`*.jfrog.io`	443	HTTPS	JFrog Artifactory token verification
`*.databricks.com`	443	HTTPS	Databricks token verification
`anypoint.mulesoft.com`	443	HTTPS	MuleSoft Anypoint credential verification
`api.tailscale.com`	443	HTTPS	Tailscale token verification
`storage.googleapis.com`	443	HTTPS	GCP service account verification

Payment and billing

Host	Port	Protocol	Purpose
`api.stripe.com`	443	HTTPS	Stripe API key verification
`connect.squareup.com`	443	HTTPS	Square API key verification
`*.chargebee.com`	443	HTTPS	Chargebee API key verification
`app.midtrans.com`	443	HTTPS	Midtrans API key verification
`api.paystack.co`	443	HTTPS	Paystack API key verification

Email and communication

Host	Port	Protocol	Purpose
`api.sendgrid.com`	443	HTTPS	SendGrid API key verification
`api.mailgun.net`	443	HTTPS	Mailgun API key verification
`*.api.mailchimp.com`	443	HTTPS	Mailchimp API key verification
`api.mailjet.com`	443	HTTPS	Mailjet API key verification
`api.postmarkapp.com`	443	HTTPS	Postmark API key verification
`api.resend.com`	443	HTTPS	Resend API key verification
`api.telegram.org`	443	HTTPS	Telegram Bot token verification
`hooks.slack.com`	443	HTTPS	Slack Webhook URL verification
`*.webhook.office.com`	443	HTTPS	Microsoft Teams Webhook verification
`verify.twilio.com`	443	HTTPS	Twilio API key verification
`api.airbrake.io`	443	HTTPS	Airbrake API key verification
`api.hunter.io`	443	HTTPS	Hunter API key verification
`api.intercom.io`	443	HTTPS	Intercom API key verification
`api.us.nylas.com`	443	HTTPS	Nylas API key verification

CI/CD and DevOps

Host	Port	Protocol	Purpose
`circleci.com`	443	HTTPS	CircleCI token verification
`api.travis-ci.com`	443	HTTPS	Travis CI token verification
`api.github.com`	443	HTTPS	GitHub token verification
`sonarcloud.io`	443	HTTPS	SonarCloud token verification
`api.codeclimate.com`	443	HTTPS	Code Climate token verification
`api.stackhawk.com`	443	HTTPS	StackHawk API key verification
`api.apify.com`	443	HTTPS	Apify API key verification
`api.apollo.io`	443	HTTPS	Apollo API key verification
`app.asana.com`	443	HTTPS	Asana token verification

Package registries

Host	Port	Protocol	Purpose
`registry.npmjs.org`	443	HTTPS	NPM token verification
`rubygems.org`	443	HTTPS	RubyGems API key verification
`www.nuget.org`	443	HTTPS	NuGet API key verification
`*.p.rapidapi.com`	443	HTTPS	RapidAPI key verification

CRM and business tools

Host	Port	Protocol	Purpose
`api.hubapi.com`	443	HTTPS	HubSpot API key verification
`api.airtable.com`	443	HTTPS	Airtable API key verification
`api.getpostman.com`	443	HTTPS	Postman API key verification
`api.getbeamer.com`	443	HTTPS	Beamer API key verification
`api.linear.app`	443	HTTPS	Linear API key verification
`api.mapbox.com`	443	HTTPS	Mapbox API key verification
`api.openweathermap.org`	443	HTTPS	OpenWeatherMap API key verification

Blockchain and crypto

Host	Port	Protocol	Purpose
`mainnet.infura.io`	443	HTTPS	Infura API key verification
`api.bitkub.com`	443	HTTPS	Bitkub API key verification
`api.polygon.io`	443	HTTPS	Polygon API key verification
`*.alchemy.com`	443	HTTPS	Alchemy API key verification

Media and storage

Host	Port	Protocol	Purpose
`api.dropboxapi.com`	443	HTTPS	Dropbox token verification
`api.cloudinary.com`	443	HTTPS	Cloudinary credentials verification

Security and networking

Host	Port	Protocol	Purpose
`api.shodan.io`	443	HTTPS	Shodan API key verification
`api.abuseipdb.com`	443	HTTPS	AbuseIPDB API key verification

Miscellaneous services

Host	Port	Protocol	Purpose
`www.googleapis.com`	443	HTTPS	Google API key verification
`api.agora.io`	443	HTTPS	Agora API key verification
`io.adafruit.com`	443	HTTPS	Adafruit IO key verification
`api.abyssale.com`	443	HTTPS	Abyssale API key verification
`app.surgehq.ai`	443	HTTPS	SurgeAI API key verification
`*.shopify.com`	443	HTTPS	Shopify token verification
`api.duffel.com`	443	HTTPS	Duffel API key verification
`api.easypost.com`	443	HTTPS	EasyPost API key verification
`sslmate.com`	443	HTTPS	SSLMate API key verification

Overview

Core concepts

Assets

Scanning

Integrations

Vulnerability management

Policies

Views & Filters

Insights

Security & access

Self-hosting

Reference

Network requirements

Core infrastructure

Version control systems

Ticketing integrations

Compliance integrations

Analytics and monitoring

User avatars

Secret verification providers

AI and ML services

Cloud infrastructure

Payment and billing

Email and communication

CI/CD and DevOps

Package registries

CRM and business tools

Blockchain and crypto

Media and storage

Security and networking

Miscellaneous services

​Core infrastructure

​Version control systems

​Ticketing integrations

​Compliance integrations

​Analytics and monitoring

​User avatars

​Secret verification providers

​AI and ML services

​Cloud infrastructure

​Payment and billing

​Email and communication

​CI/CD and DevOps

​Package registries

​CRM and business tools

​Blockchain and crypto

​Media and storage

​Security and networking

​Miscellaneous services

Core infrastructure

Version control systems

Ticketing integrations

Compliance integrations

Analytics and monitoring

User avatars

Secret verification providers

AI and ML services

Cloud infrastructure

Payment and billing

Email and communication

CI/CD and DevOps

Package registries

CRM and business tools

Blockchain and crypto

Media and storage

Security and networking

Miscellaneous services