Recurly
OfficialRecurly publishes regional IP allowlists (US and EU) for secure communication with external systems, including webhook delivery. Allowlist the region that matches your Recurly site; also use HTTP Basic Authentication on webhook endpoints.