diff --git a/internal/handlers/egress_allowlist_defaults.yaml b/internal/handlers/egress_allowlist_defaults.yaml
index a4bc650..1c4647a 100644
--- a/internal/handlers/egress_allowlist_defaults.yaml
+++ b/internal/handlers/egress_allowlist_defaults.yaml
@@ -339,6 +339,7 @@ ecosystem_default_domains:
     - maven.fullstory.com
     - maven.lokalise.com
     - repository.medallia.com
+    - maven.configdirector.com
     - jogamp.org
     # JCenter is retired but still 301-redirects to repo1.maven.org, which is
     # already allowed; only the entry point of the chain needs listing.
diff --git a/internal/handlers/egress_allowlist_test.go b/internal/handlers/egress_allowlist_test.go
index fb87892..fbfd0c0 100644
--- a/internal/handlers/egress_allowlist_test.go
+++ b/internal/handlers/egress_allowlist_test.go
@@ -1323,6 +1323,7 @@ func TestEgressAllowlist_PublicRegistriesThirdWaveAllowed(t *testing.T) {
 		"https://maven.fullstory.com/com/fullstory/gradle-plugin/maven-metadata.xml",
 		"https://maven.lokalise.com/com/lokalise/sdk/maven-metadata.xml",
 		"https://repository.medallia.com/artifactory/public/com/medallia/maven-metadata.xml",
+		"https://maven.configdirector.com/com/configdirector/server-sdk/maven-metadata.xml",
 		"https://jogamp.org/deployment/maven/org/jogamp/gluegen/maven-metadata.xml",
 		"https://jcenter.bintray.com/com/google/guava/guava/maven-metadata.xml",
 		"https://salesforce-marketingcloud.github.io/MarketingCloudSDK-Android/maven-metadata.xml",
@@ -1378,6 +1379,7 @@ func TestEgressAllowlist_PublicRegistriesThirdWaveAllowed(t *testing.T) {
 		"https://evil.maven.fullstory.com/payload",
 		"https://evil.maven.lokalise.com/payload",
 		"https://evil.repository.medallia.com/payload",
+		"https://evil.maven.configdirector.com/payload",
 		"https://evil.jogamp.org/payload",
 		"https://evil.jcenter.bintray.com/payload",
 		"https://evil.pkg.kzu.app/payload",
@@ -1396,6 +1398,7 @@ func TestEgressAllowlist_PublicRegistriesThirdWaveAllowed(t *testing.T) {
 		"https://fullstory.com/payload",
 		"https://lokalise.com/payload",
 		"https://medallia.com/payload",
+		"https://configdirector.com/payload",
 		"https://essentialsx.net/payload",
 		"https://xposed.info/payload",
 		"https://julialang.net/payload",