ngrok review
A broad reverse proxy platform for managed tunnels, APIs, and secure ingress.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
ngrok is developer infrastructure for exposing, routing, and securing applications, APIs, services, and AI models. It connects local or private services to managed public endpoints through agents, APIs, SDKs, or Kubernetes integrations. The platform suits individual developers, teams, and enterprises handling development, preview, production, device, or customer-network workloads, with web, Windows, macOS, API, and self-hosted options.
Its reverse proxy scope extends beyond tunneling. ngrok provides TLS termination at its edge, API and universal gateway traffic routing, Traffic Policy rules for forwarding, authentication, and rate limiting, and OWASP CRS web application firewall rules. It also supports WebSocket-to-TCP conversion, global load balancing across points of presence, traffic inspection, event logging, webhook verification, and replay workflows. Kubernetes ingress and controller integrations, plus connections for services such as Auth0, AWS CloudWatch, Datadog, GitHub, Google, Microsoft Entra ID, Okta, Slack, and Terraform Cloud, broaden its platform fit.
The published plans create a clear progression. Free includes up to 3 online endpoints, 1GB of data transfer, up to 20k HTTP/S requests, and 1 team member. Hobbyist costs $10 per month and includes 3 online endpoints, 5GB of data transfer, 100k HTTP/S requests, and 1 team member. Pay-as-you-go costs $20 per month plus usage, with unlimited endpoints, data transfer, HTTP/S requests, and team members, alongside included allowances and optional SSO & RBAC and SCIM add-ons. Enterprise adds SSO/SAML, SCIM, dedicated support SLAs, security reviews, and HIPAA, SOC 2, and BAAs. Choose ngrok when ingress control and security features matter together; simpler tunnel needs may fit the Free or Hobbyist plans better.
ngrok pros and cons
- Where it wins
- Secure tunnels connect local or private services to public endpoints
- Traffic policies support authentication, forwarding, and rate limiting
- WAF rules, TLS termination, inspection, and global load balancing included
- Where it doesn't
- Free plan limits endpoints, transfer, requests, and team membership
- Pay-as-you-go adds usage charges beyond its included allowances
- Enterprise pricing uses per-device and per-customer pricing
ngrok fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update