The ngrok blog

Securing your environment is challenging. With ngrok, you can centralize management to ensure policies are applied consistently, no matter the stack.

While ngrok has made it easy to launch your fantastic new app online in one line, bad actors have also used this capability to launch their own attacks. Blocking and eliminating this malicious behavior is key to what we do and we've taken another step to protect users without breaking legitimate applications.

In this post, we cover the different methods you can use for authenticating traffic with ngrok, including OAuth and OpenID Connect using Traffic Policy.

The ngrok security and trust portal shares how we secure the ngrok service, our shared security model, how we handle data, and the steps we take to protect it.

Last week, we fixed a multi-tenancy bug in the ngrok dashboard’s caching layer. We have contacted all accounts affected by the bug directly.

In this guest post, the maintainer of the Aero project shares how she's using ngrok as a key component in their spam fighting and community moderation approach.

How to run ngrok with Slack webhook authentication? GitHub OAuth? How to serve files? This cheat sheet shows the main commands!

In this post, we navigate some of the best practices, key considerations, and features provided by ngrok for production scenarios

Use ngrok Cloud Edge for app observability, load balancing, compression, and security – without the burden of running and maintaining middleware infrastructure.

ngrok Secure Tunnels. With one command share your apps, APIs, and systems with the world, without complex network configuration, reliability issues, and NAT.

ngrok Cloud Edge and Secure Tunnels are huge advancements but they aren't all we've been working on. ngrok is fully programmable, observable, and observable.

We have successfully completed the System and Organizational Controls (SOC) 2 Type 1 examination establishing controls and safeguards within ngrok.

From the earliest webhooks at Twilio to every major SaaS platform, webhooks have become a defacto standard in web development. But before we can use them well, we have to use them correctly. Let's look at what that takes.

We can be "Happier with Zapier" and get rid of repetitive tasks like updating spreadsheets. Check out what we can automate by adding ngrok and a remote API.

Learn how to set up and manage ngrok tunnels straight from VS Code. If you want to do the same, grab your VS Code and follow along.

Easily test code – i.e. trigger a webhook or API request from a service or load certain pages as a user.

What can you tunnel with ngrok? More and more, a better question is: What can't you tunnel with ngrok?