# pgrok/pgrok

Poor man's ngrok - a multi-tenant HTTP/TCP reverse tunnel solution through SSH remote port forwarding

Repository: https://github.com/pgrok/pgrok
Canonical: https://ross.abutalabs.com/products/pgrok
Language: Go
License: MIT
License Family: permissive
Topics: ngrok-alternative, reverse-tunnel, sso, oidc, ssh-tunnel, http, go, pgrok, tcp
Last push: 2026-06-02T03:38:34+00:00

## Health v2 (maintenance only)
Score: 82/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 85, release rhythm 74, longevity 91
- inputs: {"age_days": 1274, "days_push": 92, "days_rel": 92, "gap_med": 83.5, "n_releases_24m": 7}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3627, forks 131 (observed 2026-08-28T04:08:11.953864+00:00)

## What it is
pgrok is a self-hosted, multi-tenant HTTP/TCP reverse tunnel solution that exposes local development environments to the public internet using SSH remote port forwarding. It assigns each team member a stable subdomain gated through your own SSO provider via OIDC, positioning itself as a bare-bones alternative to ngrok's enterprise tier for small teams.

## Use cases
- expose my local dev server to the public internet
- self-hosted ngrok alternative with SSO
- share localhost with teammates behind single sign-on
- ssh remote port forwarding tunnel with stable subdomains
- test webhooks against a local development environment
- let non-technical teammates access a locally running app without server setup

## When to choose
- A small team needs to expose local development environments to the internet with stable, per-user subdomains
- You already have a domain, a public-facing server, an OIDC SSO provider (Google, Okta, Keycloak, GitLab, etc.), and a PostgreSQL instance
- You want SSO-gated tunnels without paying per-user enterprise pricing of commercial tunneling services

## When to avoid
- Production systems requiring an SLA - the README explicitly warns this is not built for production reliability
- Individuals who just want a quick throwaway tunnel and don't want to own a domain, server, and SSO setup
- Teams where nobody can operate a VPS, DNS records, and PostgreSQL

## Facets
- artifact type: service
- maturity: active
- function: networking, proxy, ssh, auth, self-hosted
- domain: web-development, developer-tools, networking, self-hosted, security
- platform: windows, self-hosted, go, cli
- tags: ngrok-alternative, reverse-tunnel, ssh-tunnel, port-forwarding, tunneling, sso, oidc, multi-tenant, stable-subdomains, localhost-exposure, webhook-testing, postgresql, caddy, linux, macos, docker

## Member repositories
- pgrok/pgrok (main) score 82

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:08:11.953864+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:31:55.114205+00:00, confidence not recorded.
  - readme: https://github.com/pgrok/pgrok (fetched 2026-08-28T04:08:11.953864+00:00, sha 186f4503a1be)
- Data as of 2026-08-30T08:39:29.467469+00:00.