ngrok

ngrok

Freemium

The programmable network edge for your apps.

DevOps & CI/CD
Tunneling & Secure Access

Published 27 September 2026

Scores

Popularity4/5

The name most developers reach for first when they need to expose a local server — long-standing mindshare in webhook testing and dev-preview workflows specifically.

Learning Curve1/5

A single CLI command produces a working public URL with no account configuration, DNS setup, or domain ownership required to get started.

Flexibility3/5

Covers HTTP, TCP, and TLS tunnels plus Kubernetes ingress, with edge traffic policies for auth and rate limiting, though the deepest features sit behind paid plans.

Performance3/5

Runs on a globally distributed edge network with solid latency for typical dev-preview and webhook workloads, without the scale of the largest CDN networks.

Portability4/5

A standalone client binary that works against any local service or cloud origin with no DNS zone or vendor account tie-in beyond ngrok itself, making it easy to drop into any project.

About ngrok

ngrok is a reverse proxy and secure tunneling service that gives a local or self-hosted service a public URL without any router configuration, static IP, or owned domain. Running the ngrok client establishes an encrypted connection to ngrok's cloud edge, which then forwards internet traffic to whatever is listening on the specified local port — a ngrok http 3000 command is enough to get a working public HTTPS URL.

It is best known as a local development tool: previewing a work-in-progress app for a teammate or client, or receiving real webhook callbacks (Stripe, GitHub, Twilio) on a machine that has no public address. The built-in request inspector shows every request and response passing through the tunnel, making it a common debugging aid for webhook-driven integrations. Beyond HTTP, ngrok also tunnels raw TCP and TLS traffic, and supports Kubernetes ingress for routing external traffic into a cluster.

For production or always-on self-hosted use, ngrok supports reserved custom domains, traffic policies (authentication, rate limiting, IP restrictions) enforced at the edge, and a dashboard for managing multiple tunnels across a team. The free plan is deliberately small (a one-time usage credit, up to three endpoints, and 1GB of data transfer), which pushes persistent or higher-traffic use toward the usage-based Hobbyist and Pay-as-you-go plans.

Key Features

  • Instant public HTTPS URL for a local server with a single command
  • Built-in request inspector for debugging webhooks and API traffic in real time
  • Reserved custom domains for stable, persistent public URLs
  • TCP and TLS tunnels in addition to HTTP, plus Kubernetes ingress support
  • Edge traffic policies for authentication, rate limiting, and IP restrictions
  • Team dashboard for managing and auditing tunnels across multiple developers

Pros

  • Fastest way to get a public URL for a local dev server, with no domain or DNS setup
  • Request inspector is a genuinely useful debugging tool for webhook-driven development
  • Mature ecosystem with wide integration support and long-standing developer mindshare
  • Handles raw TCP/TLS tunnels, not just HTTP, and can front a Kubernetes ingress
  • Reserved domains and edge traffic policies make it viable beyond just local dev previews

Cons

  • The free plan is small: a one-time $5 usage credit, 1GB of data transfer, and 20,000 requests
  • Persistent custom domains and higher-traffic production use require a paid plan
  • No unlimited-bandwidth free tier comparable to some tunnel alternatives
  • Usage-based billing adds up for teams running many services
  • Every request still transits ngrok's cloud edge even for purely local-to-local debugging

ngrok Pricing

Freemium
FreeFree
  • · $5 of one-time included usage
  • · Up to 3 endpoints, 1GB data transfer, 20,000 HTTP requests
Hobbyist$10/monthly
  • · $10 of monthly included usage
  • · 5GB data transfer and 100,000 HTTP requests included
Pay-as-you-go$20/monthly
  • · $20 of monthly included usage, then billed by use
  • · Unlimited endpoints and team members (3 included)
  • · Wildcard endpoints
EnterpriseContact sales
  • · SSO/SAML, SCIM, dedicated support, and SLAs
  • · HIPAA, SOC 2, and custom terms
  • · Contact sales for pricing

Tech Stacks with ngrok

n8n Self-Hosted

Infrastructure

Self-host n8n on your own VPS, cloud instance, or hardware for complete data ownership and no per-execution pricing. Docker keeps the deployment reproducible on any host; PostgreSQL, SQLite, or managed Neon can store workflows and execution history, and a reverse proxy you configure or a self-hosted PaaS handles routing and TLS.

Databases

Hosting

Automation

DevOps

Database:
Deploy on:
Reverse Proxy:
Self-Hosted PaaS:
Tunnel add-on:
Queue Broker add-on:

Ghost Self-Hosted

Infrastructure

Run Ghost on your own server instead of paying Ghost(Pro) as your audience grows. Ghost publishes, manages members and paid subscriptions, and sends newsletters, with MySQL storing content and members and Docker keeping installs and upgrades to a few commands.

Deploy on:
Reverse Proxy:
Self-Hosted PaaS:
Tunnel add-on:

Plausible Self-Hosted

Infrastructure

Run Plausible Community Edition on your own server for cookie-free analytics with no pageview caps. ClickHouse stores the events and answers dashboard queries fast at high volume, PostgreSQL holds accounts and site settings, and the official Docker Compose file brings up all three containers together.

Deploy on:
Reverse Proxy:
Self-Hosted PaaS:
Tunnel add-on:

Tools Related to ngrok

Works well with ngrok(4)

ngrok can forward tunnel traffic to a local Caddy instance that handles routing and HTTPS between backend services, the same layered pattern used with any reverse proxy sitting behind a tunnel.

ngrok can forward tunnel traffic to a local Traefik instance for container-aware routing to backend services, the same layered pattern used with any reverse proxy sitting behind a tunnel.

ngrok can forward tunnel traffic to a local NGINX instance that handles routing between backend services, the same layered pattern used with any reverse proxy sitting behind a tunnel.

Ngrok's ephemeral public tunnels and Tailscale's persistent private network solve different, complementary problems on the same self-hosted server.

Alternatives to ngrok(1)

Both expose a local or self-hosted service without opening inbound ports. ngrok gives an instant public URL with no domain, but its free plan is capped and persistent custom domains are paid; Cloudflare Tunnel is free with no bandwidth cap but needs a domain on Cloudflare.

Learning Resources

No resources yet — check back soon.

Tags

Free TierWeb

Details

Maintained
Yes