Secure tunnels and remote access
for every machine.
A persistent public URL for anything you run.
Private access to every device you deploy.
Built on security and privacy.
Public URLs for local services and private access to deployed devices. What you send is never logged, and the agent is open source.
Tunnels
A persistent public URL for anything you run
Share a local app with a client or receive webhooks from Stripe and GitHub. Your URL survives every restart.
- HTTP, TCP and TLS
- Automatic HTTPS
- Custom domains
- One webhook URL for your whole team
Remote Access
Private access to every device you deploy
Reach kiosks, gateways and servers on networks you don't control. Your devices stay off the public internet.
- No open ports, no VPN
- Per-device permissions
- Instant revocation
- Access logs
Security and privacy
Security your team can verify
The agent on your machine is open source. We don't log what you send and we don't hold your private keys.
- Open-source agent
- Traffic content never logged
- Keys stay on the device
- EU data residency
Public URLs over HTTP, TCP and TLS.
Run one command and your local service is online, at a URL that survives every restart.
- Custom subdomain
- Pick your own name, kept across restarts
- Custom domain
- Your own domain or a wildcard, HTTPS included
- Reserved ports
- A fixed port for TCP and TLS tunnels
- Region
- EU, US or Asia Pacific
- IP allowlist
- Only the addresses you list get in
- Basic auth
- A password in front of any HTTP tunnel
- Header authentication
- Requests must carry the headers you set
- Signature verification
- Stripe, GitHub, Shopify and Slack webhooks verified
Manage every device from one dashboard.
Remote Access is included in the Pro, Business and Enterprise plans.
See which devices are online, how long they have been up and how much traffic they carry, live.
- Easy setup
- One command on each device
- Auto-join
- New devices add themselves to your fleet
- Live status
- Online state, uptime and traffic
- Any port
- SSH, VNC, a web interface or your own service
- Works behind NAT
- CGNAT, cellular and customer networks
One webhook URL for your whole team.
Register the URL with your provider once. Every connected teammate receives each request live.
- One permanent URL
- Set it in Stripe or GitHub once
- A copy for everyone
- Each teammate gets every request
- One primary
- One device answers, the rest listen
Your traffic is yours.
We record only what we need to run your account. The content of your traffic is never logged.
- We never log what you send
- We forward your traffic and never store it.
- Keys stay on the device
- Private keys never leave the machine that holds them.
- Traffic stays in your region
- EU, US or Asia Pacific, chosen for each tunnel.
- EU data residency
- Account data and backups are stored in the European Union.
Get your first tunnel running.
-
Create a tunnel in the dashboard.
Give it a name and pick a region.
-
Install the agent.
-
Run the command the dashboard hands you.
It already carries your tunnel's token.
Every plan starts with a trial. Cancel any time.
- macOS
- Linux
- Windows
- Docker
- Raspberry Pi
Inspect exactly what runs on your machine.
The Localport agent is open source under Apache 2.0. Read the code on GitHub and verify every signed release before you run it.
- One binary, no dependencies
- Runs on a laptop, a server or a Raspberry Pi.
- Works behind NAT and firewalls
- Outbound connections only. No ports to open.
- Reconnects on its own
- Back within seconds after a network change, on the same address.
- Runs as a service
- Starts at boot with systemd or launchd.
One flat price for your whole team.
Every teammate is included in the plan. There are no per-seat fees and no usage bills, so your cost stays the same as your team grows.