Which domains do we add to our network's 'Allowed List' to ensure access to Procore?

Answer

If your organization utlizes network security rules, firewalls, or proxy servers that restrict internet access, your IT department must regularly update your network’s allowed list to ensure the Procore platform is fully accessible.

To learn more, see:

  • Allowed Domains

  • Network Ports & Protocols

Allowed Domains

Important icon Important Note On Maintenance

Last updated July 31, 2025. Procore updates this list as our services evolve. To prevent access problems, ask your IT department to bookmark this page and check it regularly to keep your organization's allowed list up-to-date.

Primary Procore Domain

For the most comprehensive and future-proof configuration, Procore strongly recommends adding a wildcard entry for our primary domain. This single entry will cover the majority of current and future Procore services.

  • .procore.com

Specific Procore & Third-Party Domains

If your network security policies do not permit wildcard entries or if you require a more granular list, please ensure the following domains are explicitly added to your allowed list.

Note icon Note

Domains marked with an asterisk (*) do not require you to add each sub-domain.

Procore Services:

  • *.procore.com

  • *.cdn.procore.com

  • *.pages.procore.com

  • api.procore.com

  • app.procore.com

  • assets0.procore.com

  • assets1.procore.com

  • assets2.procore.com

  • assets3.procore.com

  • events.procore.com

  • learn.procore.com

  • login.procore.com

  • my.procore.com

  • storage.procore.com

  • support.procore.com

  • us02.procore.com

Required Third-Party and Supporting Services:

  • *.bugsnag.com

  • *.launchdarkly.com

  • *.pendo.io

  • *.salesforceliveagent.com

  • *.uservoice.com

  • a.mtstatic.com

  • bam.nr-data.net

  • by2.uservoice.com

  • c.la4-c2-was.salesforceliveagent.com

  • chat.stream-io-api.com

  • cloudflare.com

  • consent.truste.com

  • d.la4-c2-was.salesforceliveagent.com

  • d3sbxpiag177w8.cloudfront.net

  • files.mtstatic.com

  • fonts.googleapis.com

  • fonts.gstatic.com

  • js-agent.newrelic.com

  • maxcdn.bootstrapcdn.com

  • rs.fullstory.com

  • s3.amazonaws.com

  • sdk.iad-01.braze.com/api/v3/data

  • sdk.iad-05.braze.com/api/v3/data

  • us01-i-prod-estimating-storage.s3.amazonaws.com

  • widget.uservoice.com

  • www.glancecdn.net

  • www.google.com

Network Ports and Protocols

All standard communication with the Procore platform is secured using industry-standard protocols. Real-time features in some applications also use secure web sockets. Please ensure your network allows outbound traffic for the following:

  • Protocol: HTTPS (using TLS)

  • Port: 443 (TCP)

  • Real-time Updates: WebSocket Secure (WSS) protocol, which also operates over port 443.