ngrokvs
Cloudflare
Cloudflare: Cloudflare Tunnel does the same job free of charge if you already run your DNS there
ngrok
Reverse tunnel service that gives a local or private service a public URL without opening a firewall
As of 31 August 2026, ngrok is free to use. An agent makes an outbound connection and ngrok publishes your local service on a public hostname with TLS. Softwr lists it under Networking. ngrok is made by ngrok Inc, available on Linux, macOS, Windows, Docker.
Overview
What ngrok does
ngrok publishes services that have no public address. An agent running next to the service opens an outbound connection to the ngrok network, and inbound requests to an ngrok hostname are carried back down that connection. Because the connection is outbound, nothing needs to be opened on the firewall and no public IP is required, and TLS is terminated for you. It has since grown into an ingress platform with traffic policy rules, authentication, mutual TLS, an API gateway feature set and a Kubernetes operator. What distinguishes it is how little there is to set up. A developer testing a payment webhook is running in under a minute, which is why it became the standard answer for that problem and why it is installed on far more machines than it is paid for. The commercial consequence is that the free tier is deliberately limited in ways that surface at exactly the moment a demo becomes a habit: random hostnames unless you claim a static domain, connection and bandwidth limits, and a browser interstitial on free HTTP endpoints that confuses anyone you send a link to. Buyers are development teams, and increasingly platform teams using it as managed ingress for services in private networks or Kubernetes clusters. The trade-off is that all traffic traverses ngrok infrastructure, so you inherit its latency and its availability, and the configuration you build up in traffic policy is not portable to anything else.
What people use it for
- Receiving webhooks from a payment or messaging provider on a laptop during development
- Demonstrating a work in progress application to someone outside the network without deploying it
- Publishing a service inside a private network or Kubernetes cluster without a public load balancer
- Giving a partner a temporary authenticated endpoint into an internal API
Related searches
The honest half
Where it falls short
Concrete and checkable, so you can decide whether any of them matter to you. This is the half of a review a vendor will not write about ngrok.
- Free HTTP endpoints show a browser interstitial before the page loads, which breaks first impressions in demos and confuses anyone you send the link to.
- All traffic passes through ngrok infrastructure, so you inherit its latency and an ngrok incident takes every published endpoint down at once with no local failover.
- Pricing is per user seat plus allowances, so a platform team publishing many endpoints ends up buying seats for people who never open the dashboard.
- Bandwidth is metered on paid tiers, so a workload that quietly grows into serving real traffic produces overage rather than a flat bill.
- Traffic policy configuration is specific to ngrok, so the authentication and routing logic you accumulate at the edge has to be rebuilt if you later move to a conventional ingress.
Cross-shopped
What people choose instead of ngrok
Each pairing was judged by two reviewers asking whether a buyer would genuinely weigh the two against each other. The ones that failed were deleted rather than published.
- ngrokvsCaddy
Caddy: If you have a public server, a reverse proxy with automatic certificates removes the need for a tunnel service entirely
- ngrokvsTraefik
Traefik: For publishing cluster services where you control the ingress point and do not need a third party network
Pricing
What ngrok costs
Taken from the vendor's own pricing page. Prices move, so check before you buy.
Free
Free
- One static domain
- HTTP endpoints with a browser interstitial
- Limited simultaneous connections
- Community support
Personal
On request
- Removes the interstitial warning page
- Additional reserved domains
- TCP endpoints
Pro
On request
- Per user billing with team accounts
- Traffic policy rules and edge authentication
- Higher bandwidth allowances
- Support with response commitments
Enterprise
On request
- Custom terms and volume pricing
- Dedicated capacity options
- Compliance and audit requirements
Capabilities
Features
Outbound agent tunnels
Publishes a local service without inbound firewall rules or a public IP address
Static domains
Reserved hostnames so a published URL survives an agent restart
Traffic policy
Rules for authentication, rate limiting, header manipulation and routing at the edge
Request inspection
A local interface that replays and inspects requests, which is why it is used for webhook development
Kubernetes ingress
An operator that publishes cluster services without a load balancer or public address
TCP and TLS endpoints
Exposes non HTTP services such as SSH and databases on paid tiers
Answered, with sources
Questions people ask
Each answer names the page it came from, so you can check it rather than take our word for it.
Can I use it in production?
It is sold for that now, with static domains, policy rules and a Kubernetes operator. The question is whether you accept a third party on the traffic path for every request.
Why does my free URL show a warning page?
Free HTTP endpoints carry an interstitial. Removing it requires a paid plan, and it is the most common reason people upgrade.
Does it work for SSH or a database?
Yes through TCP endpoints, which are a paid feature.
What is the self hosted alternative?
A reverse proxy on a server you own with a tunnel back to the service, or one of the self hosted tunnel projects. All of them cost more setup time than the thing they replace.
Keep looking
Where to go from ngrok
- ngrok alternativesEvery product people weigh against it
- ngrok pricingPlans, floors and what the tiers exclude
- ngrok badgesWhich rules it meets, and the figure behind each
- All Networking softwareThe full category
- Best Networking softwareThe shortlist, and how it was cut
Best Networking software for
Compare ngrok with
- Cloudflare
- Traefik
- Twingate
- pfSense
- Cisco Meraki
- Kentik
- Netdata
- Nebula
- Consul
- Tailscale
- Auvik
- OpenVPN
- ThousandEyes
- ZeroTier
- Juniper Mist
- Eclipse Mosquitto
- Traefik
- Nebula
Other Networking software
Zero trust remote access that publishes individual resources instead of a network
Free plan12 researched notesOpen source firewall software with a free Community Edition and a separate commercial Plus edition sold by Netgate
Open source12 researched notesCloud-managed networking hardware where the licence is mandatory and the hardware stops passing traffic if it lapses
Pricing on request12 researched notesNetwork observability platform built on flow and traffic data, sold on annual-only contracts starting around $24,000/year
12 researched notesPer-second metrics collection with automatic dashboards and on-node anomaly detection
Open source9 researched notesCertificate based overlay network from Slack, with identity and firewall rules carried in the certificate
Open source12 researched notesZero-trust mesh VPN built on WireGuard with identity-based access
Free plan12 researched notesCloud-based network monitoring and management priced by managed device count, quote-only
Pricing on request12 researched notesOpen source VPN protocol with a commercial Access Server product priced per simultaneous connection
Open source12 researched notesInternet and network path monitoring, owned by Cisco but still sold as a standalone product on its own annual contracts
Pricing on request11 researched notesSoftware-defined mesh networking, free up to 10 devices and one network, then billed per device
Free plan12 researched notesAI-driven wireless and wired networking where a Wi-Fi Assurance subscription is a required, not optional, add-on
Pricing on request12 researched notesSmall, EPL-licensed MQTT broker that runs on hardware other brokers cannot
Open source12 researched notesCertificate based overlay network from Slack, with identity and firewall rules carried in the certificate
Open source12 researched notes
Softwr does not host reviews and shows no star rating for ngrok, because a rating we did not collect is not ours to publish. What is here is the pricing and platform detail from the vendor’s own pages, limitations we could state concretely, and alternatives a reviewer confirmed people weigh against it. Tell us if any of it is wrong.
More on ngrok
ngrok alternatives
What people switch to, and what they give up
ngrok pricing
Every tier, and where the cost actually lands
Compare ngrok
Put it head to head with anything we hold
ngrok badge
Its rating, and an embed for your own site
Best Networking software alternatives
Open source infrastructure monitoring, free at its core, with paid support and modules sold separately by Icinga GmbH
Open source core, with paid repository, module and support subscriptions sold separately
Network monitoring for MSPs and IT teams priced per managed device or per collector, with published rates
Per collector or per managed device per monthAI-driven wireless and wired networking where a Wi-Fi Assurance subscription is a required, not optional, add-on
quote, hardware plus required Wi-Fi Assurance subscription
Free, community-driven network monitoring with commercial support sold by a third-party partner, not the project itself
Open source, no licence fee; commercial support sold by a third-party partner
Internet and digital experience monitoring, with a genuinely published entry price through its WebPageTest product line
Free tier plus published entry tiers, enterprise quote-onlyNetwork observability platform built on flow and traffic data, sold on annual-only contracts starting around $24,000/year
Annual contract only, per tierCloud-managed networking hardware where the licence is mandatory and the hardware stops passing traffic if it lapses
quote, hardware plus mandatory recurring licenceCloud-based network monitoring and management priced by managed device count, quote-only
quote, per managed device