IP Whitelist - Application UI

It is possible to restrict the access to the Mend organization in the Legacy SCA application, to specific whitelisted IP addresses only, by navigating to:
Admin (top right) → Security → IP Whitelist.
Users with unlisted IP addresses will NOT be able to perform the following operations:

  1. Log in to the relevant organization in the application UI.

  2. Scan and upload to the relevant organization (not applicable to offline scans).

    image-20201215-164635.png


  3. Use API calls to retrieve data from the relevant organization.

    image-20250925-163301.png

A few points to note:

  1. There is no limit to the number of IP addresses a user can whitelist.

  2. The use of subnets (or IP ranges) for multiple IP addresses - is not currently supported. Only specific IP addresses are supported.

  3. Regarding private IP addresses (ex. 192.168.x.x), they are only relevant for on-premise deployment of our solution, since we cannot identify the internal IP address of the requestor in an SaaS solution.