Having a paid subscription and not being able to provide security to my bot is critical. We recently had one of our bots hijacked and drove our tokens and messages & events to limits. Having a whitelist of domains feature is a MUST if you want to deploy something to production and keeping it behind the higher end plans condems small start ups of using the service of botpress. For example we've been using botpress for a whole year now and this is such a strong factor that forces us to develop our own agents and deploying them on AWS ourselfs. Escaping the botpress environment. We believe it's a no brainer to add whitelisting of domains to all paid plans.

The whitelist should be a one-time option (pay once to have it) or a per-item fee.