Abstract: Disclosed in some examples are methods, systems, machine-readable mediums, and computing devices for improved network security for network-based services. A firewall service protecting one or more provider computing devices that providing the network-based service may block all traffic by default. This prevents any network intrusions. A client computing device wishing to access a network-based service contacts an authority computing device of the network-based service. If the client computing device is authenticated by the authority computing device, the authority device provides a network address of a provider computing device which provides the network-based service for the account that was authenticated. The authority computing device also sends a message to a firewall service providing the firewall for the provider computing device to open a temporary hole in the firewall for the client computing device.