diff --git a/src/docs.json b/src/docs.json
index 1fb179bc..cfda2da1 100644
--- a/src/docs.json
+++ b/src/docs.json
@@ -321,6 +321,12 @@
                   "troubleshooting-guides/salesforce"
                 ]
               },
+              {
+                "group": "Security",
+                "pages": [
+                  "security/outgoing-ip-addresses"
+                ]
+              },
               "dev-and-prod-environments",
               "terminology",
               "unified-api"
diff --git a/src/generate-docs.ts b/src/generate-docs.ts
index c93b2f43..28801093 100644
--- a/src/generate-docs.ts
+++ b/src/generate-docs.ts
@@ -553,6 +553,12 @@ const baseConfig = {
             "troubleshooting-guides/salesforce"
           ]
         },
+        {
+          group: "Security",
+          pages: [
+            "security/outgoing-ip-addresses"
+          ]
+        },
         "dev-and-prod-environments",
         "terminology",
         "unified-api",
diff --git a/src/security/outgoing-ip-addresses.mdx b/src/security/outgoing-ip-addresses.mdx
new file mode 100644
index 00000000..69823f13
--- /dev/null
+++ b/src/security/outgoing-ip-addresses.mdx
@@ -0,0 +1,20 @@
+---
+title: "Outgoing IP addresses"
+---
+
+All outgoing API requests from Ampersand to SaaS providers originate from a fixed set of IP addresses. If a provider app or API you are integrating with supports IP allowlisting (sometimes called whitelisting), add the following IP addresses to its allowlist so that requests from Ampersand are not blocked.
+
+## IP addresses to allowlist
+
+```
+34.53.82.136
+34.53.32.186
+34.182.109.175
+```
+
+These IP addresses apply to all outgoing traffic from Ampersand, including:
+
+- [Read actions](/read-actions): API calls to read data from providers.
+- [Write actions](/write-actions): API calls to write data to providers.
+- [Proxy actions](/proxy-actions): API calls proxied through Ampersand.
+- [Subscribe actions](/subscribe-actions): API calls to create and manage webhook subscriptions.