Developer Tunnels & Localhost Ingress brand directory

Cloudflare Tunnel is a free, outbound-only secure tunnel service that exposes localhost or private-network services to the internet—or to Zero Trust-protected audiences—through Cloudflare's global edge network, without open inbound ports or public IPs. It is part of Cloudflare's broader connectivity cloud platform, which spans CDN, DDoS protection, WAF, Zero Trust Network Access, SASE, and a developer platform.

ngrok is an all-in-one cloud networking platform that provides secure tunnels, a programmable Universal Gateway, an AI Gateway, Kubernetes ingress, and traffic observability. Its lightweight agent and native SDKs connect services running anywhere to a global network, enabling developers to expose localhost, route and authenticate traffic, test webhooks, and deliver APIs and AI model endpoints—all without modifying firewalls or standing up separate proxy infrastructure.

Tailscale is a zero-trust, identity-first secure networking platform built on the WireGuard protocol. It creates an encrypted peer-to-peer mesh overlay network between enrolled devices and services without requiring complex firewall configuration, public IPs, or centralized relay routing for most connections. Key surface-area products include the core tailnet VPN, Tailscale SSH with optional session recording, Funnel for public localhost ingress, a Kubernetes operator for ephemeral workload connectivity, and Aperture for AI agent governance.

Pinggy is a managed localhost-to-internet tunneling platform that creates instant, secure public URLs for local services using standard SSH remote port forwarding. It supports HTTP(S), TCP, UDP, and TLS protocols and is accessible via SSH command, a dedicated CLI, a cross-platform GUI desktop app, or Node.js/Python SDKs—all without requiring a binary download. Built-in tooling includes a web debugger, a rich terminal UI for live request inspection, and live HTTP header manipulation. Pro features extend the platform with persistent subdomains, custom and wildcard domains, team collaboration, and remote device management.

LocalXpose is a managed localhost tunneling and reverse proxy service that exposes local servers, IoT devices, and on-premises systems to the internet over encrypted tunnels, without requiring VPN clients, firewall rules, or router configuration. It is operated by Freeport Cloud, Inc. and targets developers for webhook testing and dev previews as well as B2B SaaS vendors needing always-on connectivity to customer-site hardware.

Inlets is a self-hosted HTTP and TCP tunnel platform that lets developers and infrastructure teams securely expose private services to the internet or connect distributed environments—without shared SaaS servers, rate limits, or VPN overhead. It is built natively for containers and Kubernetes.

Teleport is an Infrastructure Identity Platform that consolidates zero-trust access, machine identity, identity governance, and identity security into a single platform. It issues cryptographically-signed, ephemeral certificates to humans, machines, workloads, and AI agents—eliminating passwords, SSH keys, and shared secrets. Engineers access any infrastructure resource through a unified proxy that enforces RBAC policies, records sessions, and generates compliance-ready audit logs, all without installing VPNs or managing credential rotation.

NetBird is an open-source, WireGuard®-based Zero Trust Network Access platform that replaces traditional VPNs with a configuration-free peer-to-peer overlay network. It connects remote users, cloud resources, and on-premises infrastructure through encrypted, identity-governed tunnels—without requiring open firewall ports, VPN gateways, or static routing configurations. Available as a cloud SaaS or fully self-hosted deployment.

NetFoundry is the commercial developer and operator behind OpenZiti—the leading open-source zero-trust networking framework—and zrok, an open-source developer tunneling product. In the Developer Tunnels vertical, zrok enables developers to securely share local services, web servers, and files over the internet with no firewall ports opened, using OpenZiti's zero-trust overlay for identity-based mutual TLS. For enterprises, the NetFoundry Platform provides a managed NaaS that replaces VPNs, secures APIs, connects IoT/OT, and enables app-embedded zero-trust networking through multi-language SDKs.

PageKite is a managed and self-hostable localhost tunneling solution that securely exposes local web, SSH, and TCP servers to the public internet via a global relay network, with privacy-first design, automatic HTTPS, and dedicated IoT/embedded SDKs.