CMMC-Compliant · Federal-Ready

A real public IP
for your Starlink connection

SecureLink gives federal contractors and field teams a permanent static IP address over Starlink satellite internet, with FIPS-validated encryption and zero-touch deployment. Plug in. Hit connect. Done.

Starlink
Dynamic CGNAT
SecureLink VPN
FIPS · IKEv2/IPsec
Your Static IP
52.7.x.x
How it works

From unboxing to static IP in under 10 minutes

No CLI gymnastics. No support tickets. The activation flow is designed so a non-technical user can be online with a static public IP in a single sitting.

Provision a device

Open the admin portal, click Add Device, and we issue an X.509 certificate, allocate a dedicated Elastic IP, and generate a one-time activation code.

Activate the client

The user opens the Windows client (or plugs in the Pi gateway), enters the activation code, and we provision the IPsec tunnel automatically with certificate authentication.

Connected, with a static IP

All outbound traffic now exits from a permanent dedicated IPv4 address. Whitelist it, configure SD-WAN against it, run an SSH jumphost — treat it like any other public IP.

Features

Built for federal contractors and field teams

Static IPs, FIPS-grade crypto, certificate authentication, and hardware appliance options — without making your customers run a Wireguard binary or learn ipsec.conf.

Permanent static IP

Each device gets a dedicated AWS Elastic IP that stays assigned for the life of the subscription. Whitelist once, connect anywhere.

FIPS-validated crypto

IKEv2/IPsec with AES-256-GCM, SHA-384, and ECP-384. Certificate-based authentication via AWS Certificate Manager Private CA — no shared secrets.

Pi gateway appliance

Plug-and-play Raspberry Pi gateway with zero-touch provisioning via AWS IoT. Connects an entire network through the VPN — no per-device install.

Windows native client

Uses the built-in Windows IKEv2 stack with CNG cert storage. No third-party VPN binary, no admin install, no support drift.

Real public IP semantics

1:1 NAT, not per-port forwarding. All ports, all protocols. Run inbound services, host RTSP, expose an SSH bastion — same model as a real ISP.

Audit-ready logs

Connection logs are written to DynamoDB with retention policies suitable for DFARS / CMMC audit trails. Export at any time.

Use cases

What customers actually do with a static Starlink IP

From PCI compliance at a retail register to a Navy comms truck on an airfield, the pattern is the same: somewhere remote, the network needs to look the same as a corporate office.

Federal & DoD field sites

Forward operating bases, mobile comms vehicles, and Starshield-augmented deployments that need IPs ACL'd into HQ networks.

Retail PCI compliance

Card-present POS at locations Starlink reaches but cellular doesn't. Static IP keeps the merchant gateway happy and the auditor happier.

SD-WAN failover

Drop SecureLink in as a Starlink-backed WAN profile in Meraki, Cisco, or Fortinet. Tunnel terminates at a static IP your existing overlay already trusts.

Incident response & emergency

Fire department command trailers, mobile EOC vehicles, and disaster recovery deployments. Static IP for VPN dial-back, even when terrestrial circuits are down.

Remote IT & surveillance

Reach cameras, sensors, and management interfaces inside the Starlink dish's network without exposing the customer LAN to the internet.

Enterprise firewall pinning

Egress every Starlink site through a known IP. Simplifies allow-lists at SaaS providers, banks, healthcare partners, and federal exchanges.

Downloads

Pick the right package for your deployment

Already have an activation code? Download the client and you're online in minutes. Need an activation code? Talk to sales.

Windows VPN Client

Desktop client with automatic certificate-based VPN connection, system tray integration, and one-click activation. Wraps the Windows native IKEv2 stack.

Requirements: Windows 10/11 (x64) · .NET 8 Runtime
Download Installer (.msi)

Pi Gateway Kit

Complete setup package for the Raspberry Pi gateway appliance. Includes the provisioning agent, IPsec configs, and WiFi access point setup.

Requirements: Raspberry Pi 3B+ / 4 / Zero 2W · Raspberry Pi OS (Bookworm)
Download Package (.tar.gz)
FIPS 140
Validated Crypto
CMMC L2
Compliance Ready
IKEv2/IPsec
VPN Protocol
AES-256-GCM
Encryption
AWS-Hosted
US Infrastructure
Pilot programs available

Talk to our team about a deployment

Whether it's 5 Starlinks or 5,000, we'll scope a pilot, ship the appliances, and get you to a static IP. Most deployments go from intro call to first connected site in under two weeks.

Pilot pricing for 1–10 sites Volume pricing for fleet deployments Federal contract vehicles available