Pricing Glossary

Definitions for every feature and metric that appears in the ngrok pricing docs.

​

Online endpoints

The number of endpoints you can have online at the same time. Learn More

​

Development endpoint hours

Public endpoints started with your development domain do not accrue endpoint hours. Learn More

​

Active endpoint hours

An endpoint is active if it has outgoing traffic during the hour. Learn More

​

Endpoint protocols

These are the different protocols available to you as a subscriber of each plan. Learn More

​

Endpoint hours

The amount of time your endpoints are online.

​

Load balancing

Load balancing at ngrok is called endpoint pooling. Learn More

​

Domains

Domains you own registered in the ngrok dashboard. Learn More

​

Development domain

Your development domain is specific to your account, and does not incur usage charges. You can use anything for free on your sandbox domain within your account’s limits. Learn More

​

ngrok-branded domains

Use any ngrok-branded domain that you pick from ngrok’s pool. Learn More

​

Traffic Policy Units

Traffic Processing Units (TPUs) are ngrok’s usage-based metric for measuring the work your Traffic Policies perform. Learn More

​

Bring your own custom domains

Use any custom domain name that you already own with ngrok. Learn More

​

Wildcard Domains

You can create an endpoint which will receive traffic for all of the subdomains matching a given wildcard domain like *.example.com. Learn More

​

TCP Addresses

TCP Addresses enable you to create public TCP Endpoints on a fixed address. Learn More

​

Data transfer out

The total volume of data transferred outbound from ngrok’s network to clients, including traffic forwarded to agents. Learn More

​

Requests to HTTP/s endpoints

The maximum number of HTTP/s requests a client can make to an account’s endpoints in a month. Learn More

​

Connections to TCP / TLS endpoints

The maximum number of TCP/TLS connections a client can make to an account’s endpoints in a month. Learn More

​

HTTP Requests

The maximum number of HTTP requests across all endpoints per minute. Learn More

​

TCP Connections

The maximum number of TCP connections across all endpoints per minute. Learn More

​

Bring your own certificates

Upload your own TLS certificates if you don’t want to use the TLS certificates that ngrok automatically provisions for you. Learn More

​

End to End TLS

Terminate TLS at your upstream service or at the ngrok agent to achieve end-to-end encryption. Learn More

​

Mutual TLS

Mutual TLS Authentication (mTLS) is a network security protocol that ensures both the client and server authenticate each other using digital certificates. Learn More

​

Traffic Policy Units (TPUs)

This is a combination of the actions, macros, and variables applied to a request. WAF, mTLS, and more are included in TPUs. Learn More

​

Traffic Identities

OAuth/SAML/OIDC. This is calculated by the number of end users that authenticate into your app or service via the traffic policy action. Learn More

​

Traffic Inspector Retention

This is the number of hours ngrok retains your traffic data in traffic inspector. Learn More

​

Traffic Log Exporting

Export event logs when traffic transits through your endpoints to S3, Datadog, Azure Logs, CloudWatch Logs + more. Learn More

​

Concurrent Agents

The maximum number of ngrok agents that can be simultaneously connected to the ngrok cloud service under a single account. Learn More

​

Dedicated Agent Connect IPs

Get a constant, dedicated IP for your account’s agents. Learn More

​

Custom Agent Connect URLs

Customize the URL that the agent connects to. Learn More

​

Remote Agent Update Operations

Run ngrok in the background as a service. Learn More

​

Users

Members of your account that can view or create endpoints. Learn More

​

Service Users

Service users are accounts for automated systems that programmatically interact with your ngrok accounts either by starting ngrok Agents or making requests to the API. Learn More

​

SSO/RBAC

Federate auth to your Identity Provider (IdP) with SAML or OpenID Connect. Learn More

​

Identity and Access Governance Suite

SCIM, Domain Controls, Account-Wide IP Restrictions, Audit Logs. Learn More

​

Authtoken ACLs

Authtoken ACLs restrict what endpoints an ngrok agent can create when using that authtoken. Learn More

​

Basic support

Email support and best-effort response times.

​

Slack and MS Teams

Dedicated channel with 24 hour response SLA.

​

Dedicated On-Call

Committed/Contractual Uptime SLA and Support SLA.

​

Region-specific routing

Configure your domains to only route traffic through specific geographic regions.

​

HIPAA / BAAs

HIPAA compliance is built in: ngrok handles the BAA so you can focus on building the app.

​

SOC2

Independent verification that your data is secure.

​

Security questionnaires

If your team requires a security questionnaire, ngrok can prepare it.

​

Invoicing

If your team requires an invoice for billing purposes, ngrok can send it.