Nebula - IPGuard (Access Control) is a powerful security plugin that allows you to restrict application access based on the user's public IP address. Perfect for internal systems, corporate apps, intranet setups, and any environment where you need employees or users to log in only from authorized networks.

---

---

Overview  
Nebula – IPGuard (Access Control) brings enterprise-grade network restriction to Bubble apps with an intuitive, no-code interface.  
It allows you to authorize or deny access based on the user’s current public IP address — ensuring that only approved networks (such as office IPs) can access your application.

Ideal for businesses that want to protect internal systems, dashboards, CRMs, or any app that must only be accessed inside the company network.

How It Works  

• Client IP Detection: the plugin’s element automatically fetches the user’s public IP when the page loads.
  
• Server-Side Validation: the SSA compares the captured IP with a whitelist of authorized IPs or CIDR ranges.
  
• Accurate Matching: supports exact IPs (e.g., 187.57.174.99) and full CIDR ranges (e.g., 187.57.174.0/24).
  
• Workflow Integration: easily trigger logouts, redirects, alerts, or logs depending on authorization results.
  
• Enterprise Reliability: works entirely inside Bubble — no external servers or webhooks required.
  

When to Use  

• To restrict access to internal dashboards or administrative areas.
  
• When your app should only be usable inside the company office/network.
  
• To block logins coming from VPNs, residential networks, or unauthorized locations.
  
• For SaaS apps that need IP-based security rules for certain roles or subscriptions.
  
• To comply with internal IT policies where network-level access is mandatory.
  

Benefits  

• Adds an essential layer of security to Bubble apps.
  
• Simple IP management using a Bubble property or database list.
  
• Ensures users only access your system from safe, recognized networks.
  
• No need for custom servers, scripts, or API infrastructure.
  
• Lightweight, fast, and designed for production environments.
  

Key Features  

• Automatic IP Detection: the plugin element fetches the user’s public IP client-side.
  
• Server-Side Validation (SSA): ensures the validation logic is secure and workflow-friendly.
  
• Supports IP Lists & CIDR: whitelist single IPs or entire ranges.
  
• High Compatibility: works with any Bubble workflow, action, or database setup.
  
• Access Logging: integrate into your own logging system to track allowed/denied attempts.
  
• Zero Dependencies: no external backend or third-party API required.