Blog
34 posts tagged with Security.
Oct 21, 2026
eMudhra root CA issue: the default ngrok agent isn't affected
A third-party certificate authority, eMudhra, had CA keys exposed. ngrok wasn't breached, and the default agent config isn't affected. Here's how to check the few non-default settings that might be.
Mar 13, 2026
Secure internal Kubernetes connections with pod identity variables
Use Kubernetes pod identity variables in Traffic Policy to make access control decisions based on which workload is connecting.
Feb 24, 2026
Windows binaries are now signed with an EV certificate
We've met stricter identity verification and hardware requirements for signing keys to stop Defender warnings without changing anything for you.
Nov 4, 2025
How ngrok secures your apps with modern TLS
ngrok has deprecated of Transport Layer Security (TLS) versions 1.0 and 1.1 across all ngrok endpoints. What does that mean for you?
Aug 25, 2025
ngrok is now HIPAA-compliant
HIPAA compliance opens ngrok for healthcare workloads—API gateways, webhook handling, and remote access with ePHI securely in transit.
Jul 8, 2025
Introducing Secrets for Traffic Policy
Secrets let you define and manage sensitive values in secure vaults—no more hardcoding or repetitive edits during regular credential rotations.
May 7, 2025
Battle against search and AI bots on your ngrok endpoints
Are search and AI bots invading your ngrok endpoints? Fight back with three developer-friendly traffic policies you can deploy in minutes.
Mar 27, 2025
Modernize and secure how you access remote devices
Ditch complex SSH/RDP chains and VPNs—here's how I help folks use ngrok to create secure and dynamic access to remote services or sites with a single agent.
Mar 11, 2025
Four ways multicloud breaks you (and how API gateways help)
Multicloud isn’t magic—it’s a mess of networking, configuration, security, and observability pain. API gateways can help—here’s how to fix it the easy way.
Aug 5, 2024
Data at ngrok: A primer
Understand how ngrok handles your data with advanced security measures, offering clarity and control over your traffic flows and storage.
Jun 17, 2024
What is port forwarding?
Port forwarding opens a specific "door" on your network so outside traffic can reach a service inside it. See how it works and why CGNAT breaks it.
Mar 14, 2024
AI meets privacy: ngrok's secure bridge to customer data
Explore how ngrok enhances AI development by enabling secure, direct access to customer data, ensuring data integrity and privacy.
Mar 8, 2024
What Is a Device Gateway? Types and Architecture
A device gateway connects sensors, controllers, and machines to your network and cloud. Learn how device gateways work, their architecture and types, and how to reach every device remotely with ngrok.
Feb 29, 2024
Vulnerability management in BYOC environments
Explore vulnerability management in cloud apps, focusing on SaaS accessing customer databases in BYOC environments, with security and compliance insights.
Feb 26, 2024
Introducing JWT validation for your API
ngrok's developer-defined API gateway introduces support for JWT validation. Learn about ngrok's implementation and how to add JWT validation to your APIs.
Jan 26, 2024
Add OAuth 2.0 to a Node.js CRUD app
Secure a Node.js CRUD app using the ngrok JavaScript SDK for stable domain setup. Implement OAuth through Google for user authentication and authorization.
Dec 7, 2023
Our next generation firewall project
Read about how we have improved our firewall and created an open-source Firewall Toolkit in the process.
Nov 8, 2023
Bolster control and governance with ngrok Account Domain Controls
Introducing ngrok Account Domain Controls: Unify user accounts, enforce policies, and secure ngrok usage with ease.
Oct 18, 2023
MFA for your production infrastructure running on ngrok
Learn how ngrok secures your production infrastructure using MFA and Time-Based One Time Passwords (TOTP).
Oct 17, 2023
Authentication at the network edge
Enhance network security with various authentication methods at the network edge. Thwart unauthorized access and minimize attack surfaces.
Jul 11, 2023
Webhook Verification with ngrok Edges
Keep your webhook verification settings around by configuring them using an ngrok Cloud Edge. This demonstrates the process using the ngrok-go library.
Jun 21, 2023
Add Auth0 authentication to ngrok traffic
Securely add production-grade auth with self-service sign-ups, account recovery, and social auth for multiple platforms - integrate ngrok to Auth0.
Jun 6, 2023
Verifying PagerDuty Webhooks with ngrok
Easily validate PagerDuty webhooks without making any changes to your code using ngrok's webhook verification feature.
Apr 11, 2023
Integrating OAuth into your Rust App
ngrok is useful to run alongside your app. What happens when you embed it and start activating OAuth, webhook verification, load balancing, and more?
Mar 16, 2023
Expanding ngrok's free plan with security in one line
We're adding our security features — OAuth and Webhook validation — to our free plan.
Feb 28, 2023
How ngrok Actively Combats Phishing Attacks
Phishing attacks are one of the most common attacks on the internet, and ngrok is committed to actively trying to stop them.
Nov 14, 2022
Webhook Security in the Real World
Webhooks enable us to react to changes like text messages, successful payments, or pull requests. Few pay attention to their design, security or controls.
Nov 9, 2022
Single Sign-On for the ngrok Dashboard
Sign in to ngrok easier with SSO
Jul 26, 2022
There and Back Again: An OAuth Story
I've worked with OAuth 2.0 for over 6 years. It's always been a complex and challenging beast to fight until now.
Jul 20, 2022
Announcing our SOC 2 Type 2 Report
We’re excited to announce that we have successfully completed the System and Organizational Controls (SOC) 2 Type 2 testing with no findings. Read more for more information.
Jun 28, 2022
ngrok: Defense in Depth
Securing your environment is challenging. With ngrok, you can centralize management to ensure policies are applied consistently, no matter the stack.
Jun 8, 2022
Authentication with ngrok
Add authentication to any ngrok endpoint in minutes with Traffic Policy. Choose Basic Auth, OAuth login, OpenID Connect, or JWT validation, no code required.
Apr 19, 2022
Securing your Applications with OAuth 2.0 in seconds
ngrok Secure Tunnels. With one command share your apps, APIs, and systems with the world, without complex network configuration, reliability issues, and NAT.
Mar 22, 2022
Getting Started with Webhooks
From the earliest webhooks at Twilio to every major SaaS platform, webhooks have become a defacto standard in web development. But before we can use them well, we have to use them correctly. Let's look at what that takes.
