The ngrok blog

The last month has been busy at ngrok! We’re tremendously proud to announce we’ve raised $50M in funding to grow ngrok’s API-first ingress as a service platform for developers. We’ve also focused on improving security with Dashboard SSO and Identity-Aware Ingress, developer experience with new documentation, and contribute to the community with webhook security and an open source firewall toolset for go

Today, ngrok is growing faster than ever. To meet that increasing demand, we’re thrilled to announce our first-ever fundraising round of $50 million. We’ve raised this round to scale ngrok’s business across the board and to dramatically increase our investment in delivering new products for ngrok developers.

Today, we are adding additional visibility for users logging into your application through our edge. Now you can see your application users in the ngrok dashboard and view their identity details. In this blog, I'll explain why this feature is a huge win for security and how you can take advantage of it today.

Webhooks are the foundation of modern API development. They enable us to react to changes in our systems, an incoming text message, a successful payment, or that latest pull request no matter our stack. While webhooks are universal in concept, they are unstandardized API contracts with few organizations paying attention to their design, security controls, and overall operational experience.

Even the best developers tools need to integrate with the systems and processes that protect your organization. With Dashboard Single Sign-On, ngrok is one of them!

This month, we focused in two areas you asked for (a lot) and filled in some other bits and bytes to give you a hand: productivity features to launch your tunnels quickly with style and security features so you use ngrok in your org with IT and security approval.

ngrok is stronger when it's integrated with everything else in your stack. With our new Partnership Program, we're working to integrate it with everything out f the box to make your life easier.

Since our major release in April, we've been busy on all fronts from webhook verification, the trust & security portal, and even our community efforts with Slack. Read on for more details!

We’re excited to announce ngrok has been named one of the Top 100 Early-Stage Companies to Work for in 2022 by executive search firm Will Reed.

I've worked with OAuth 2.0 for over 6 years. It's always been a complex and challenging beast to fight until now.

We’re excited to announce that we have successfully completed the System and Organizational Controls (SOC) 2 Type 2 testing with no findings. Read more for more information.

Securing your environment is challenging in the best of times. With ngrok, you can centralize management to ensure policies are applied consistently, no matter the stack.

While ngrok has made it easy to launch your fantastic new app online in one line, bad actors have also used this capability to launch their own attacks. Blocking and eliminating this malicious behavior is key to what we do and we've taken another step to protect users without breaking legitimate applications.

In this post, I cover the different methods you can use for authenticating traffic with ngrok, including OAuth and OpenID Connect.

Launching the ngrok security and trust portal is another step to towards transparency in how we approach the security of the ngrok service, our shared security model, how we handle data, and the steps we take to protect it.

Last week, we fixed a multi-tenancy bug in the ngrok dashboard’s caching layer that unintentionally leaked data between a small subset of ngrok accounts when they viewed the ngrok dashboard. This bug affected less than 5% of ngrok’s active users. We have contacted all accounts affected by the bug directly via email with instructions for remediation.

In this guest post, the maintainer of the Aero project shares how she's using ngrok as a key component in their spam fighting and community moderation approach.

How to run ngrok with Slack webhook authentication? How to use GitHub OAuth? How to serve files? This cheat sheet shows the main commands! Print it and hang it on your wall or download it and keep it on hand.

In this post, we navigate some of the best practices, key considerations, and features provided by ngrok for production scenarios

Learn how to use ngrok Cloud Edge middleware to address app requirements – such as observability, load balancing, compression, and security – fast and without the burden of running and maintaining a middleware infrastructure.

ngrok Secure Tunnels provides a simple to enable remote access to systems. With one command— i.e. `ngrok http 80` — you can share your apps, APIs, and systems with the world, without complex network configuration, reliability issues, and NAT. However, with power comes great responsibility so let's add OAuth 2.0

ngrok Cloud Edge and Secure Tunnels are huge product advancements but they aren't all we've been working on. ngrok is fully programmable, observable, and observable.

We’re excited to announce that we have successfully completed the System and Organizational Controls (SOC) 2 Type 1 examination establishing controls and safeguards within ngrok.

From the earliest webhooks at Twilio to every major SaaS platform, webhooks have become a defacto standard in web development. But before we can use them well, we have to use them correctly. Let's look at what that takes.

We love the phrase "Happier with Zapier" because we can get rid of those menial, repetitive tasks like updating spreadsheets. Check out what we can automate by adding ngrok and a remote API.

Learn how to set up and manage ngrok tunnels straight from VS Code. If you want to do the same, grab your VS Code and follow along.

Testing code is a tedious task and can take a lot of time, especially when certain conditions – i.e. trigger a webhook or API request from a service or load certain pages as a user – are required.

What can you tunnel with ngrok? More and more, a better question is: What can't you tunnel with ngrok?