New network security features for monday code apps

Hi builders,

We’re gradually rolling out two new capabilities to help you build more secure, transparent, and enterprise-ready apps on monday code:

  1. Outbound communication control

You can now define a network allowlist for your app’s outbound traffic - giving you complete control over which external services your app can communicate with, and even allows you to block outbound communication entirely.

This adds a new layer of data transparency and control - giving your users peace of mind about what, if any, data leaves monday.com.

  1. Static IPs for outbound traffic

monday code now supports a set of static IP addresses for all outbound traffic. Use them to configure your external services to accept requests only from these trusted IPs - ideal for working with firewalls, security groups, or IP-based authentication.

These updates are especially valuable for apps built with enterprise needs in mind - where trust, compliance, and network security aren’t just nice to have, but essential.

Check out the developer documentation to learn more.

As always, we’d love your feedback - feel free to reply here with your thoughts, questions, or ideas.

2 Likes

Hey @Shahar-monday, this is very exciting from a security point of view.

We really want to use this for our Microsoft 365 SharePoint integration for monday.com, but will need to have wildcard allowlisting e.g. for https://*.sharepoint.com so that all Microsoft 365 tenants can be allowed.

When can wildcards be added to the allowlist?

@dvdsmpsn can you please open a feature request?

Thanks!

@rotemin Done.