LionLink PantheraSecure: a WireGuard VPN with a dedicated public IP.
A managed WireGuard VPN with a dedicated public IPv4 routed specifically to you. For teams whose vendors still allowlist by IP — and the engineers who need a clean egress.
- WireGuard · dedicated IPv4
- AS54098 · routed to your tenant
- per-user keys · IdP integration
- split-tunnel or full-tunnel
LionLink PantheraSecure, in plain terms.
LionLink PantheraSecure is a managed WireGuard VPN service with one detail most providers will not give you: a dedicated public IPv4 address routed from AS54098 specifically to your tenant. That IP is yours, not shared with strangers, so vendor allowlists work the way they were designed to. IPv6 is included where your endpoints support it.
Standard WireGuard clients on macOS, Windows, Linux, iOS and Android. Per-user keys, revocation in seconds, split-tunnel where you want it and full-tunnel where you do not. We will run the concentrators on AS54098, manage the key rotation cadence, and integrate with your identity provider for onboarding and offboarding.
Built for the practical cases: SaaS vendors that allowlist by IP, internal apps reachable from a known egress, remote engineers who want a quiet path home, and small teams who do not want to stand up a VPN appliance to get one static IP. Not marketed as 'privacy' — it is operational plumbing.
Common triggers for this engagement.
- 01A vendor or partner allowlists by IP and you need a stable egress
- 02Your remote team needs a clean static path into a private network
- 03You want WireGuard managed for you, with per-user keys and revocation
- 04You need IP allowlist parity for offices and remote staff
Questions teams ask before signing.
Is the IP really dedicated to my team?
Yes. Your tenant gets its own IPv4 routed from AS54098. It is not a NAT pool shared across customers. That is the whole point — vendor allowlists need a stable, exclusive source IP to be useful.
Does PantheraSecure work with my identity provider?
Yes — we integrate with common IdPs so onboarding and offboarding follow your existing joiner/leaver process. Key issuance is automated, revocation is immediate.
Can I get multiple dedicated IPs in different regions?
Yes. Multi-region dedicated IPs are supported for teams that need egress from specific geographies. Tell us the regions and we will quote what is realistic on AS54098 and our peering footprint.
Is this a privacy VPN?
No. PantheraSecure is operational infrastructure for businesses — IP allowlist scenarios, clean remote egress, and IdP-managed access. If you need a consumer privacy product, this is not it.
Frequently scoped alongside this work.
IP Transit (BGP)
Full BGP transit on AS54098 with direct peering at Hurricane Electric and transit through GTT into the rest of the Tier-1 fabric. Bring your own ASN and prefixes — we handle the policy and the on-call.
24/7 NOC
Eyes on your network around the clock, run by the engineers who write the runbooks. Pages routed to humans, not a ticket queue — for incidents that need a real person at 3 a.m.
Cybersecurity Consulting
Architecture review, control-gap analysis, and incident readiness — paired with operators who understand the network the controls run on. We tell you which fixes are real and which are theater.
Virtual Desktops
VDI and session-based desktops for distributed teams. Pinned to a region, hardened for compliance, and managed without renting another seat from someone else's portal.