Anyway is a career exploration and learning platform built on consideration and used by students and teachers. Two things commonly prevent it from working correctly on school networks:
- Email filtering - sign-in verification codes and invitation emails are quarantined or rejected.
- Web filtering - the app, or a service it depends on, is blocked by the district content filter.
This guide lists exactly what to allow. Everything is served over HTTPS (port 443).
1. Email Whitelisting
Anyway does not use passwords. Students and teachers sign in either with a one-time verification code sent to their email address, or with an individual "Sign in with Google / Microsoft" social login. If our email is filtered, users who don't use Google/Microsoft sign-in cannot log in at all. We also send teacher/student invitations and important account notifications by email.
Please whitelist the following sender domains in your email security gateway (e.g. Google Workspace, Microsoft 365/Defender, Barracuda, Proofpoint):
| Domain | Example sender | Used for |
| app.anyway.ai | info@app.anyway.ai | Transactional email — sign-in verification codes, student & teacher invitations, account notifications |
| info.anyway.ai | hello@info.anyway.ai | Product updates and announcements |
All Anyway email are sent from these two subdomains; at minimum, please whitelist app.anyway.ai (blocking it prevents sign-in). Whitelisting the parent domain anyway.ai including subdomains covers both.
Recommendations:
- Whitelist by domain, not by IP address. Our email is sent through a managed email service and is fully authenticated with SPF, DKIM and DMARC; sending IPs may change without notice.
- If your gateway supports it, add the domains above to the bypass list for spam/bulk-mail scoring, not just the block list.
- Verification code emails are time-sensitive (codes expire after a short window) - please ensure they are not routed through delayed quarantine/sandbox detonation.
2. Web Filter Whitelisting
Please allow the following in your web filter/firewall (Lightspeed, GoGuardian, Securly, iboss, Palo Alto, etc.).
2.1 Anyway platform (required)
| Domain | Purpose |
| anyway.ai and *.anyway.ai | The Anyway application, API, and content delivery |
If you prefer to allow specific hosts rather than the wildcard, these are the hosts in use for US schools:
| Host | Purpose |
| anyway.ai | Student app (anyway.ai), teacher portal (anyway.ai/schools), and API |
| public-blob.us.anyway.ai | Images, video, and learning content (CDN) |
| mp.app.anyway.ai | First-party analytics endpoint |
| pages.anyway.ai / www.pages.anyway.ai | Information and marketing pages |
| sockets.us.anyway.ai | Real-time updates (WebSocket) |
| unleash-edge.us.anyway.ai | Feature configuration — required for the site to function |
WebSockets: the platform uses secure WebSocket connections (wss:// on port 443) for real-time features. If your filter or proxy strips or blocks WebSocket upgrades, please exempt *.anyway.ai from SSL inspection / WebSocket blocking.
2.2 Third-party services (required for full functionality)
| Domain | Purpose | Impact if blocked |
| challenges.cloudflare.com | Cloudflare Turnstile — bot protection on sign-in | Users cannot log in |
| accounts.google.com | Sign in with Google | Google sign-in fails (email code sign-in still works) |
| login.microsoftonline.com, aadcdn.msftauth.net, aadcdn.msauth.net | Sign in with Microsoft | Microsoft sign-in fails (email code sign-in still works) |
| player.vimeo.com, *.vimeocdn.com, *.akamaized.net | Video hosting (Vimeo) for learning content | Videos will not play |
| sdk.iad-05.braze.com | In-app messages and announcements | In-app notifications will not appear |
| maps.googleapis.com, maps.gstatic.com | Google Maps — campus explorer on institution pages | Campus maps will not load |
| www.gstatic.com | Google static assets (maps tiles, 3D model decoders for badges) | Maps and badge models degraded |
| browser-intake-datadoghq.com | Error and performance monitoring (Datadog) | We can't detect issues affecting your school |
2.3 Analytics (optional)
The platform functions normally if these remain blocked; they help us measure product usage. Allow them only if consistent with district policy:
www.googletagmanager.com · *.google-analytics.com · api-js.mixpanel.com · *.hotjar.com · *.hotjar.io · connect.facebook.net · analytics.tiktok.com
2.4 A note on IP addresses
We intentionally do not publish static IP addresses. The platform is served from cloud CDN infrastructure (Azure Front Door) whose IPs rotate; IP-based rules will break without warning. Please use domain-based rules.
3. Accounts and Passwords
Your IT department does not need to provision accounts or manage passwords:
- Teachers and students sign in with their email address plus a one-time verification code, or individually via "Sign in with Google / Microsoft" - there are no passwords to reset or manage, and no SSO or directory integration to configure.
- If your school uses Google Workspace or Microsoft 365, the identity domains in section 2.2 are almost certainly already allowed.
- Teachers invite students from the teacher portal; Anyway support is available to help.
- Users on personal (non-school) email addresses should check their Junk/Spam folder if a verification code doesn't arrive.
4. Privacy, Terms and Compliance
- Privacy Policy:https://anyway.ai/privacy-policy
- Terms of Use:https://anyway.ai/terms
5. Need Help?
If you've applied the changes above and are still seeing issues, contact us at winona.yap@anyway.ai with:
- Your school/district name
- The URL or feature that isn't working
- Any block page or error message shown (a screenshot helps)
We're happy to work directly with your IT team.