Pricing Glossary

Definitions for every feature and metric that appears in the ngrok pricing docs.

​

Online endpoints

The number of endpoints you can have online at the same time. Learn More

​

Development endpoint hours

Public endpoints started with your development domain don’t accrue endpoint hours. Learn More

​

Active endpoint hours

An endpoint is active if it has outgoing traffic during the hour. Learn More

​

Endpoint protocols

The protocols available on each plan. Learn More

​

Endpoint hours

The amount of time your endpoints are online.

​

Load balancing

Load balancing at ngrok is called endpoint pooling. Learn More

​

Domains

Domains you own and register with ngrok. Learn More

​

Development domain

Your development domain is specific to your account, and doesn’t incur usage charges. Endpoints on it are free within your account’s limits. Learn More

​

ngrok-branded domains

Use any ngrok-branded domain that you pick from ngrok’s pool. Learn More

​

Traffic Policy Units

Traffic Policy Units (TPUs) are ngrok’s usage-based metric for measuring the work your Traffic Policies perform. Learn More

​

Bring your own custom domains

Use any custom domain name that you already own with ngrok. Learn More

​

Wildcard Domains

You can create an endpoint that receives traffic for all of the subdomains matching a wildcard domain like *.example.com. Learn More

​

TCP Addresses

TCP Addresses enable you to create public TCP Endpoints on a fixed address. Learn More

​

Data transfer out

The total volume of data transferred outbound from ngrok’s network to clients, including traffic forwarded to agents. Learn More

​

Requests to HTTP/S endpoints

The maximum number of HTTP/S requests a client can make to an account’s endpoints in a month. Learn More

​

Connections to TCP/TLS endpoints

The maximum number of TCP/TLS connections a client can make to an account’s endpoints in a month. Learn More

​

HTTP Requests

The maximum number of HTTP requests across all endpoints per minute. Learn More

​

TCP Connections

The maximum number of TCP connections across all endpoints per minute. Learn More

​

Bring your own certificates

Upload your own TLS certificates if you don’t want to use the TLS certificates that ngrok automatically provisions for you. Learn More

​

End-to-End TLS

Terminate TLS at your upstream service or at the ngrok agent to achieve end-to-end encryption. Learn More

​

Mutual TLS

Mutual TLS (mTLS) is a protocol in which the client and server authenticate each other with certificates. Learn More

​

Traffic Policy Units (TPUs)

The actions and variables applied to a request. Features such as WAF and mTLS consume TPUs. Learn More

​

Traffic Identities

The number of end users who authenticate to your app or service through a Traffic Policy action, such as OAuth, SAML, or OIDC. Learn More

​

Traffic Inspector Retention

The number of hours ngrok retains your traffic data in Traffic Inspector. Learn More

​

Traffic Log Exporting

Export event logs for traffic through your endpoints to S3, Datadog, Azure Logs, CloudWatch Logs, and more. Learn More

​

Concurrent Agents

The maximum number of ngrok agents that can be simultaneously connected to the ngrok cloud service under a single account. Learn More

​

Dedicated Agent Connect IPs

Get a constant, dedicated IP for your account’s agents. Learn More

​

Custom Agent Connect URLs

Customize the URL that the agent connects to. Learn More

​

Remote Agent Update Operations

Remotely stop, restart, or update ngrok agents running as a service. Learn More

​

Users

Members of your account who can view or create endpoints. Learn More

​

Service Users

Service users are accounts for automated systems that programmatically interact with your ngrok accounts by starting ngrok agents or making requests to the API. Learn More

​

SSO/RBAC

Federate authentication to your identity provider (IdP) with SAML or OpenID Connect. Learn More

​

Identity and Access Governance Suite

Includes SCIM provisioning, account-wide IP restrictions, and audit logs. Learn More

​

Domain Controls

Claim ownership of an email domain and control which accounts users with that domain can create or join. Domain Controls aren’t self-serve, so contact ngrok to enable them on your account. Learn More

​

Authtoken ACLs

Authtoken ACLs restrict which endpoints an ngrok agent can create when using that authtoken. Learn More

​

Basic support

Email support and best-effort response times.

​

Slack and MS Teams

A dedicated Slack or Microsoft Teams channel with a 24-hour response SLA.

​

Dedicated On-Call

Contractual uptime and support SLAs.

​

Region-specific routing

Configure your domains to route traffic only through specific geographic regions.

​

HIPAA / BAAs

Self-serve Pay-as-you-go add-on: enable it from the dashboard billing page and sign the BAA yourself. Usage-based charges cost 50% more.

​

SOC 2

Independent verification that your data is secure.

​

Security questionnaires

If your team needs a security questionnaire, ngrok can prepare it.

​

Invoicing

If your team needs an invoice for billing purposes, ngrok can send it.