MARKETPLACE
PLUGINS
NEBULA - IPGUARD (ACCESS CONTROL)
Nebula - IPGuard (Access Control) logo

Nebula - IPGuard (Access Control)

Published November 2025
   •    Updated this week

Plugin details

Nebula - IPGuard (Access Control) is a powerful security plugin that allows you to restrict application access based on the user's public IP address. Perfect for internal systems, corporate apps, intranet setups, and any environment where you need employees or users to log in only from authorized networks.


Nebula - IPGuard (Access Control)


  

 

Description

Overview  
Nebula – IPGuard (Access Control) brings enterprise-grade network restriction to Bubble apps with an intuitive, no-code interface.  
It allows you to authorize or deny access based on the user’s current public IP address — ensuring that only approved networks (such as office IPs) can access your application.

Ideal for businesses that want to protect internal systems, dashboards, CRMs, or any app that must only be accessed inside the company network.

How It Works  
  • Client IP Detection: the plugin’s element automatically fetches the user’s public IP when the page loads.
  • Server-Side Validation: the SSA compares the captured IP with a whitelist of authorized IPs or CIDR ranges.
  • Accurate Matching: supports exact IPs (e.g., 187.57.174.99) and full CIDR ranges (e.g., 187.57.174.0/24).
  • Workflow Integration: easily trigger logouts, redirects, alerts, or logs depending on authorization results.
  • Enterprise Reliability: works entirely inside Bubble — no external servers or webhooks required.

When to Use  
  • To restrict access to internal dashboards or administrative areas.
  • When your app should only be usable inside the company office/network.
  • To block logins coming from VPNs, residential networks, or unauthorized locations.
  • For SaaS apps that need IP-based security rules for certain roles or subscriptions.
  • To comply with internal IT policies where network-level access is mandatory.

Benefits  
  • Adds an essential layer of security to Bubble apps.
  • Simple IP management using a Bubble property or database list.
  • Ensures users only access your system from safe, recognized networks.
  • No need for custom servers, scripts, or API infrastructure.
  • Lightweight, fast, and designed for production environments.

Key Features  
  • Automatic IP Detection: the plugin element fetches the user’s public IP client-side.
  • Server-Side Validation (SSA): ensures the validation logic is secure and workflow-friendly.
  • Supports IP Lists & CIDR: whitelist single IPs or entire ranges.
  • High Compatibility: works with any Bubble workflow, action, or database setup.
  • Access Logging: integrate into your own logging system to track allowed/denied attempts.
  • Zero Dependencies: no external backend or third-party API required.

$100

One time  •  Or  $10/mo

stars   •   0 ratings
2 installs  
This plugin does not collect or track your personal data.

Platform

Web & Native mobile

Contributor details

Nebula logo
Nebula
Joined 2023   •   24 Plugins
View contributor profile

Instructions

Usage Guide
1. Installation
  • Install the Nebula – IPGuard (Access Control) plugin from the Bubble plugin tab.
  • Place the element Nebula – IPGuard Finder anywhere on the page you want to protect.
  • No visual configuration is needed — the element works silently in the background.

2. Core Functionality
The plugin uses a two-step approach:
  • Client-side detection: the element automatically retrieves the user's public IP address as soon as the page loads.
  • Server-side validation (SSA): workflow action Check IP Access validates the IP against your allowed IP list.

3. Plugin Element (Client Side)
The element exposes the following real-time state:

  • Current User IP (text): the public IP address detected on the user's browser.

Usage:
  • Place the element once per page.
  • Use its state in workflows, conditions, or the server-side action.

4. Server-Side Action: Check IP Access
This action securely validates the user's IP on the server side.

Inputs
  • Client IP (text): usually set to Nebula - IPGuard Finder.
  • Allowed IP List (text list): list of authorized IPs or CIDR ranges.

Returned Values
  • Current User IP (text): normalized IP used in validation.
  • allowed (yes/no): whether the client IP is authorized.
  • reason (text): "ok", "ip_not_authorized", "invalid_ip_format", or other validation results.

5. Allowed IP Formats
You may authorize:

  • Single IPs: 192.51.170.99
  • Multiple IPs: 192.51.170.99, 31.123.46.90
  • CIDR Ranges: 192.51.170.0/24 (all IPs between 192.51.170.0 and 192.51.170.255)
  • Bubble text lists: directly using dynamic lists from the database.

6. How to Use in Workflows
A common workflow to protect a page:

  • Step 1: Trigger an event (e.g., Page is loaded, or a custom trigger).
  • Step 2: Run Check IP Access
  • Set Client IP = Nebula – IPGuard Finder Current User IP
  • Set Allowed IP List = List of IPs from DB or static list
  • Step 3: Add conditions:
         
    • If Check IP Access's allowed is "no":
      •    
               
      • Log the user out
        •        
      • Redirect to a "Not Authorized" page
        •        
      • Show an alert explaining restricted access
        •    
         
    • If allowed is "yes": continue loading normally

7. Best Practices
  • Place the element at the top of the page hierarchy to ensure the IP is fetched immediately.
  • Use a database field for authorized IPs if you need easy updates without republishing the app.
  • If your app has multiple protected pages, use a reusable element containing the IPGuard workflow logic.
  • Consider redirecting unauthorized traffic to a branded error page instead of a generic message.
  • Use CIDR blocks to authorize entire office networks (e.g., 10.1.0.0/16).

8. Example Use Cases
  • Corporate Internal Systems: allow access only from office IPs or VPN gateways.
  • Admin Dashboards: add a security layer beyond login credentials.
  • SaaS Tiered Access: restrict certain features for clients based on IP regions.
  • Compliance Requirements: enforce access rules aligned with internal IT policies.

9. Troubleshooting
  • The IP is always unauthorized: check if allowed list contains spaces, hidden characters, or object fields.
  • The client_ip is empty: ensure the element is on the page and not hidden inside conditions preventing initialization.
  • CIDR not matching: validate your CIDR format (e.g., /24, /16).
  • Dynamic lists not working: confirm the list is being passed as a Bubble text list, not as a single object.

10. Support
  • For documentation, updates, and support, visit: https://nebulapps.com.br
  • You can also reach the Nebula team via the contact form or email available on the website.

Types

This plugin can be found under the following types:
Element   •   Action

Categories

This plugin can be found under the following categories:
Technical   •   Compliance   •   Location   •   Customer Support   •   Small Business   •   Input Forms   •   Analytics

Resources

Support contact
Documentation
Tutorial

Rating and reviews

No reviews yet

This plugin has not received any reviews.
Bubble logo
Product
AI
Mobile
Design
Data
Logic
Collaboration
Security
Status
Release notes
Bubble for
Founders
Developers
Agencies
Enterprise
Discover
How Bubble works
Examples
Pricing
Learn
Academy
Technical guides
Blog
How to build
Coaching
Resources
Connect to AI
Marketplace
Templates
Plugins
Experts
Bootcamps
Certification
Partnerships
Affiliates
Figma to Bubble
Community
Bubble community
Forum
Newsletter
Immerse
Early access
Store
Company
About
Careers
Brand guidelines
Support
Contact us
Legal
Terms
Privacy
©  2026, Bubble Group, Inc. All rights reserved.
Bubble
Pricing
Enterprise
Contact sales