Hi @sterlinganthony we do not have an IP whitelist as Klaviyo’s IP addresses can change dynamically.  The recommendation we provide customers is to whitelist by User-Agent of “Klaviyo/1.0”

This documentation is for Magento. I’m using WooCommerence. Site Lock can not whitelist without IP addresses. They said it is not reasonable to whitelist by user. Can you please provide IPs even if they are dynamic? Other site I’m using usually provide an extensive list. 

@sterlinganthony you are correct that the link is inside a Magento page but principle still applies here since it is the same mechanism Klaviyo is using to making api calls to 3rd party e-commerce systems.  I am sorry that even the IP ranges is dynamic, the only way to whitelist is by User-Agent

This seems incredibly silly as any bad actor could just say “I’m klaviyo” and beat all our web security. An IP list or some alternative way to whitelist klaviyo traffic is absolutely necessary. 


Update:
Nevermind found this https://help.klaviyo.com/hc/en-us/articles/19143781289115