If your organization operates in a restricted network environment where access is limited to pre-approved domains through a firewall, VPN, or web filter, it's essential to request explicit traffic allowance to Pendo servers from your network administrators.
Host names, which are specific addresses assigned to individual subdomains within a domain, play a crucial role in accessing Pendo. The host names listed in this article are essential for reaching both core service hosts necessary for using the Pendo app and support service hosts used for referencing Knowledge Base articles and other support offerings. Hosts related to accessing our marketing website and other non-core service aspects related hosts aren't included.
Wildcard option
You can include multiple host names under a single wildcard entry using asterisks (*). This means that you don't have to list each subdomain separately, and it automatically includes any new hosts we add to these domains in the future. This simplifies your allowlist management and ensures continued access to evolving subdomains.
For easy setup, we recommend adding the following wildcard entries to your allowlist:
*.firebasedatabase.appwss://*firebasedatabase.app*.firebaseio.comwss://*firebaseio.com*.googleapis.com*.pendo.io*.storage.googleapis.com*.api.velt.dev*.velt.dev
If you use these wildcards, omit all host names in the Full list of hosts that end with the following:
.firebasedatabase.app.firebaseio.com.pendo.io.storage.googleapis.com.velt.dev
Full list of hosts
The following table provides a comprehensive list of hosts that are essential for accessing Pendo's core and support services.
If you choose not to use wildcards, as recommended earlier in this article, some of these hosts might require modification if the data center for your subscription is outside of the United States. Detailed instructions for these modifications are in the subsequent section: Location-based changes.
| Source | Description |
app.pendo.io |
Access the main Pendo application. |
data.pendo.io |
Used by your Pendo Web SDK to retrieve guide metadata and send event data from your web application. |
cdn.pendo.io |
Loads your Pendo Web SDK Javascript file and global CSS. |
content.pendo-internal.pendo.io |
Loads guide content for the Pendo app. |
pendo-io-static.storage.googleapis.com |
Loads staging agents and some templated guide content. |
|
|
Loads guide content for your application. Replace YOUR_SUB_ID with your subscription ID. This is a numeric value that you can obtain from your Pendo account representative or your Pendo URL. |
data.pendo-internal.pendo.io |
Loads guide metadata and event data for the Pendo app. |
portal.pendo.io |
Access the future Pendo Listen portal. |
|
|
Access the Pendo Feedback portal. |
api.feedback.us.pendo.io |
Loads the Pendo Feedback widget so that you can submit and vote on feedback requests. |
software.mobile.pendo.io |
Allows you to download mobile SDK releases. |
sso.connect.pingidentity.com |
Allows for SAML Single Sign-On (SSO) login. |
|
|
Access the Pendo Support team and Knowledge Base articles for learning and troubleshooting content. |
developers.pendo.io |
Access Pendo's developer documentation. |
agent.pendo.io |
Access Pendo's Web SDK API documentation. |
engageapi.pendo.io |
Access Pendo's current REST API documentation. |
pendoapi.pendo.io |
Access Pendo's future REST API documentation. |
academy.pendo.io |
Access Pendo Academy to sign up for live webinars and access on-demand learning and courses. |
api.stripe.com |
Access our self-serve payment system to upgrade your Pendo Starter plan. |
netdna.bootstrapcdn.com |
Display external fonts in the Pendo web app. |
|
|
Loads guide content sent from the Pendo team. |
us-east-1.awstrack.me |
Used for invitation links embedded in emails. |
|
|
Enables real-time communication for Velt-powered collaboration features. |
https://firestore.googleapis.com |
Supports data storage and real-time updates for Velt-powered collaboration. |
https://identitytoolkit.googleapis.com |
Handles user authentication for Velt services. |
https://securetoken.googleapis.com |
Issues secure tokens to authorize Velt user sessions. |
https://cdn.velt.dev |
Loads the Velt client library used in Pendo's commenting features. |
https://api.velt.dev |
Connects to core Velt APIs for real-time collaboration and comment management. |
https://getnotificationsfordocuments.api.velt.dev |
Retrieves document-specific notification data from Velt. |
|
|
Stores and serves media and files uploaded through Velt. |
Location-based changes
If your Pendo subscription is managed through our EU, US1, Japan, or Australia data centers, it's important to update certain host names accordingly. To determine your subscription's data center, examine the URL used to access Pendo and check for the presence of eu, us1, jpn, or au. If you're not sure whether this applies to your subscription, contact your Pendo account representative.
If you opt to use wildcards, as recommended earlier in this article, these changes aren't necessary.
EU changes
| Original host name | EU host name |
app.pendo.io |
app.eu.pendo.io |
data.pendo.io |
data.eu.pendo.io |
cdn.pendo.io |
cdn.eu.pendo.io |
portal.pendo.io |
portal.eu.pendo.io |
feedback.us.pendo.io |
feedback.eu.pendo.io |
api.feedback.us.pendo.io |
api.feedback.eu.pendo.io |
pendo-io-static.storage.googleapis.com |
pendo-eu-static.storage.googleapis.com |
pendo-static-YOUR_SUB_ID.storage.googleapis.com |
pendo-eu-static-YOUR_SUB_ID.storage.googleapis.com |
content-YOUR_SUB_ID.static.pendo.io |
content-YOUR_SUB_ID.static.eu.pendo.io |
stats.pendo.com |
eu.stats.pendo.com |
https://i4jttktrbmg9gnlyffxp.firebaseio.com |
https://csj3lwdu5f2f4zeoqi6l-eu.europe-west1.firebasedatabase.app |
wss://*firebaseio.com |
wss://*.europe-west1.firebasedatabase.app |
US1 changes
| Original host name | US1 host name |
app.pendo.io |
us1.app.pendo.io |
data.pendo.io |
us1.data.pendo.io |
cdn.pendo.io |
us1.cdn.pendo.io |
portal.pendo.io |
us1.portal.pendo.io |
feedback.us.pendo.io |
feedback.us1.app.pendo.io |
api.feedback.us.pendo.io |
api.feedback.us1.app.pendo.io |
pendo-io-static.storage.googleapis.com |
pendo-us1-static.storage.googleapis.com |
pendo-static-YOUR_SUB_ID.storage.googleapis.com |
pendo-us1-static-YOUR_SUB_ID.storage.googleapis.com |
content-YOUR_SUB_ID.static.pendo.io |
content-YOUR_SUB_ID.static.us1.pendo.io |
stats.pendo.com |
us1.stats.pendo.com |
JPN changes
| Original host name | JPN host name |
app.pendo.io |
app.jpn.pendo.io |
data.pendo.io |
data.jpn.pendo.io |
cdn.pendo.io |
cdn.jpn.pendo.io |
portal.pendo.io |
portal.jpn.pendo.io |
pendo-io-static.storage.googleapis.com |
pendo-jp-prod-static.storage.googleapis.com |
pendo-static-YOUR_SUB_ID.storage.googleapis.com |
pendo-jp-prod-static-YOUR_SUB_ID.storage.googleapis.com |
content-YOUR_SUB_ID.static.pendo.io |
content-YOUR_SUB_ID.static.jpn.pendo.io |
stats.pendo.com |
jp.stats.pendo.com |
https://i4jttktrbmg9gnlyffxp.firebaseio.com |
https://xkvsz0xgapojmg08xuwd-apac.asia-southeast1.firebaseio.com |
wss://*firebaseio.com |
wss://*.asia-southeast1.firebasedatabase.app |
AU changes
| Original host name | AU host name |
app.pendo.io |
app.au.pendo.io |
data.pendo.io |
data.au.pendo.io |
cdn.pendo.io |
cdn.au.pendo.io |
portal.pendo.io |
portal.au.pendo.io |
pendo-io-static.storage.googleapis.com |
pendo-au-prod-static.storage.googleapis.com |
pendo-static-YOUR_SUB_ID.storage.googleapis.com |
pendo-au-prod-static-YOUR_SUB_ID.storage.googleapis.com |
content-YOUR_SUB_ID.static.pendo.io |
content-YOUR_SUB_ID.static.au.pendo.io |
stats.pendo.com |
au-stats.pendo.com |
https://i4jttktrbmg9gnlyffxp.firebaseio.com |
https://ll11qx6cp7mutkjcsxet-au.asia-southeast1.firebasedatabase.app |
wss://*firebaseio.com |
wss://*.asia-southeast1.firebasedatabase.app |