Get a public HTTPS URL for your local server on your own domain - no port forwarding, no firewall changes. Even on the free plan. No credit card required.
Point any domain at your tunnel. tunnelto handles DNS verification, certificate issuance, and routing automatically. Start free, then scale up when you need more.
1 custom domain is included on the Free plan.
Native binaries for every major platform. No dependencies, no runtime, no Docker.
curl -sf https://app.tunnelto.me/install.sh | sh
Apple Silicon native. Also supports Intel Macs.
curl -sf https://app.tunnelto.me/install.sh | sh
Supports ARM (aarch64) and Intel (x86_64) architectures.
scoop bucket add tunnelto https://github.com/asabi/scoop-tunnelto && scoop install tunnelto
Install via Scoop package manager. Runs natively on Windows.
One command to install, one command to connect. No config files, no Docker, no infrastructure.
Use your own domain or a *.tunnelto.me subdomain. tunnelto handles certificate issuance, DNS verification, and wildcard routing automatically.
Lock down tunnels with bearer tokens or Basic Auth. Credentials are bcrypt-hashed and never forwarded to your upstream service.
Serve HTML, CSS, and assets directly from a folder. No local server needed. Simply point a tunnel at a directory.
See real-time bandwidth usage, request counts, and per-client breakdowns. Know exactly what’s hitting your tunnels.
Receive webhooks from Stripe, GitHub, Slack, or any service that needs to reach your machine.
Share a working URL with clients and teammates. No deploy needed. Show your work in progress.
Outbound SSH connection punches through NAT and firewalls. No inbound ports needed.
Automatic TLS certificates. Zero configuration, zero cost, zero expiry headaches.
Monitor bandwidth, request volume, and per-client usage in real time. Spot anomalies before they become problems.
Point any domain at your tunnel with guided DNS setup. Ownership verification and wildcard routing included.
Manage all your connected clients from one dashboard. See OS, version, and status at a glance.
Create a free account and download the client for your OS.
Pick a domain and point it at your local port through the dashboard or CLI.
Your local service is live on a public HTTPS URL. Share it with anyone.
No per-request fees. No surprises. Unlimited requests on every plan.
tunnelto.metunnelto.metunnelto.metunnelto.meCustom bandwidth, dedicated support, and infrastructure tailored to your organization.
Each tunnel uses a dedicated SSH key with restricted authorized_keys options. No shell access, no port scanning. Only the specific tunnel port is exposed.
Choose client-side TLS termination so the server never sees your plaintext traffic. Or let the server handle certificates automatically.
Protect tunnels with bearer tokens or Basic Auth. Credentials are bcrypt-hashed and never forwarded to your upstream service.
Users can only see and manage their own tunnels, domains, and traffic. Cross-tenant data leaks are blocked at every layer.
Get a public HTTPS URL on your own domain in under a minute. No credit card required.
Create your free account