ngrok

Overview

ngrok is a cloud networking platform for connecting services to traffic through secure tunnels and configurable rules. It is best suited to developers and teams that need to expose services across different environments or protocols. Its broad routing and security controls are compelling, but usage caps and the Hobbyist plan’s hard stop matter if an endpoint must stay available.

Key features

Tunnels and traffic policy

The ngrok agent sends traffic to services wherever they run without requiring firewall changes. Traffic Policy uses CEL-based rules to route and authenticate requests, apply rate limits or WAF controls, and reject traffic. That combination gives teams more control than a basic tunnel, though the value depends on whether they need those request-level controls.

Protocols and integrations

Support spans HTTP, TLS, and TCP, including WebSockets, gRPC, SSH, Postgres, MQTT, and Minecraft traffic. This breadth makes ngrok useful beyond ordinary web development, including for services that rely on database or game-server protocols. Its Integrations Hub covers areas such as SSO, databases, Kubernetes, OAuth, webhooks, and web servers, while signature verification supports more than 70 webhook providers, including Stripe, GitHub, Twilio, Slack, and Shopify.

Security and deployment

Agent-to-edge connections use TLS 1.2 or higher, and ngrok encrypts databases, filesystems, and data warehousing at rest. It states that it is SOC 2 Type 2 compliant, supports HIPAA deployments and BAAs, and is GDPR and CCPA compliant; it also participates in the EU-US Data Privacy Framework. Region pinning and points of presence across the United States, Europe, Asia Pacific, Australia, India, Japan, and South America give teams options for keeping traffic closer to users or within a chosen region.

Paid support options include Dedicated On-Call with an eight-business-hour SLA, with Slack or Teams and 24×7 paging available as add-ons. These are relevant for production teams that need a support path, rather than solo developers choosing a tunnel for occasional use.

Pricing

ngrok uses a freemium model, with paid plans from $10/mo. Its Free plan costs 0.00 USD per free and includes $5 one-time usage, up to 3 online endpoints, 1GB of data transfer, 20k HTTP/S requests, and one team member. That is a useful starting point for personal projects, but the included usage is finite.

Hobbyist costs 10.00 USD per month, billed monthly. It raises included usage to $10 monthly, 5GB of data transfer, and 100k HTTP/S requests, while keeping the limit at 3 online endpoints and one team member. It suits an individual who needs more recurring capacity, but it is not a dependable choice for workloads that must continue after the allowance is exhausted: when Hobbyist usage credit runs out, endpoints stop working until the billing cycle ends and credit resets.

Pay-as-you-go costs 20.00 USD per month, billed monthly plus additional usage. It includes $20 monthly usage, unlimited online endpoints, data transfer, HTTP/S requests, and team members. Teams shipping production traffic gain room to grow without the Hobbyist endpoint and usage caps, but should account for additional usage charges.

Enterprise has custom pricing on a contract basis. It includes SSO/SAML and SCIM, SLAs with dedicated support, HIPAA, SOC 2, BAAs, AWS Marketplace, and per-device or per-customer pricing. It is aimed at organizations with enterprise identity, compliance, support, or deployment requirements rather than buyers seeking a fixed monthly rate.

Platforms

ngrok is available for API, Linux, macOS, self-hosted, web, and Windows environments. It supports both deployment and configuration models, with TLS termination, rate limiting, WAF, and WebSocket support.

Who it's for

The Free and Hobbyist plans are positioned for developers, solo developers, home labs, and game servers. Free is the cautious starting point for light use; Hobbyist offers a larger monthly allowance but retains tight endpoint and team limits. Teams handling production traffic are better matched to Pay-as-you-go, while Enterprise is the fit when contract terms, dedicated support, or enterprise controls are required. ngrok says 15.3 million developers have signed up, but that reach does not remove the need to match plan limits to actual traffic.

Pros and cons

• Pro: Secure tunnels avoid firewall changes, which simplifies exposing services in varied environments.
• Pro: Traffic Policy combines routing, authentication, rate limits, WAF controls, and request rejection in one rules system.
• Pro: Broad protocol and webhook support serves use cases beyond standard HTTP applications.
• Pro: Region pinning, encryption, and stated compliance support make it relevant to teams with security and residency needs.
• Con: Free and Hobbyist both cap endpoints and team size, limiting collaboration and expansion.
• Con: Hobbyist endpoints stop when usage credit runs out, so a modest plan can interrupt service until reset.
• Con: Pay-as-you-go adds charges beyond its monthly included usage, making costs dependent on consumption.

Alternatives

For a broader survey, browse Kubernetes Ingress Controllers or Reverse Proxy Software. Consider Traefik Proxy instead if a free open-source ingress controller, reverse proxy, load balancer, and service auto-discovery are the priority. Apache APISIX is another free option. Choose agentgateway if an open-source gateway deployable as a binary, Docker image, or Kubernetes workload better fits. HAProxy Ingress is a free alternative for Kubernetes clusters, with its v0.16 release requiring Kubernetes 1.21 or newer. kgateway has tailored pricing based on deployment and use case. Airlock Microgateway offers a free Community Edition for small environments or local development, with enforced throughput and six-month license validity. Contour is a free open-source Kubernetes ingress controller with community support. Kusk Gateway is another free option.

Verdict

Choose ngrok if you need secure service tunnels paired with traffic rules, broad protocol support, and options for production security or regional deployment. Its Free plan is a practical way to start, but Hobbyist’s usage-triggered outage and the per-use charges on Pay-as-you-go are meaningful trade-offs. Look elsewhere if you need a free ingress or gateway without ngrok’s plan limits, or if predictable continuous service matters more than its integrated controls.