Usage metrics
| Feature or Metric | Free Plan | Hobbyist Plan | Pay-as-you-go Plan |
|---|---|---|---|
| Online Endpoints The number of endpoints you can have online at the same time. | Up to 3 endpoints at a time. | Up to 3 endpoints at a time. | Unlimited. Each endpoint is counted toward usage. |
| Development endpoint hours Public endpoints started with your development domain do not accrue endpoint hours. | Unlimited. | Unlimited. | Unlimited. |
| Active endpoint hours An endpoint is active if it has outgoing traffic during the hour. | Dev domain endpoints do not accrue. Other endpoints consume your one-time free credit. | Dev domain endpoints do not accrue. Additional active endpoint hours are charged against your monthly credit. | Per active endpoint hour. |
| Wildcard endpoints Create a wildcard endpoint (for example, https://*.example.com). You are charged one active endpoint hour for the wildcard. | Not available | Not available | Available. For billing details, see wildcard endpoints pricing. |
| Endpoint Protocols Endpoints use one of the supported protocols (HTTP/S, TCP, TLS). | HTTP/S, TCP (with credit card verification). TLS not available. | HTTP/S, TCP, and TLS. | HTTP/S, TCP, and TLS. |
| Load Balancing (Endpoint Pooling) Combine multiple endpoints to a single domain or address for load balancing. | Yes, each endpoint in a pool counts toward your limit. Regular limits apply. | Yes, each endpoint in a pool counts toward your limit. Regular limits apply. | Yes; no limit. Each endpoint is billed separately. |
Domains and TCP addresses
| Feature | Free Plan | Hobbyist Plan | Pay-as-you-go Plan |
|---|---|---|---|
| Development domain Your account’s dev domain; endpoints on it do not accrue endpoint hours. | 1 | 1 | 1 |
| ngrok-branded domains Use any ngrok-branded domain from ngrok’s pool for public endpoints. | Assigned dev domain only | 10 ngrok-branded domains | Unlimited |
| Bring your own custom domains Use domains you own with ngrok. Pay-as-you-go: $0.01 per hour. | Not available | Not available | $0.01 per hour |
| TCP Addresses Create public TCP endpoints on a fixed address (for example, 1.tcp.eu.ngrok.io:12345). | Randomly assigned with credit card verification | 1 included, then $0.005 per hour per additional address (can be paid with included credit) | 1 included, then $0.005 per hour per additional address (can be paid with included credit); limit 100, contact ngrok for more |
Network transfer
| Feature | Free Plan | Hobbyist Plan | Pay-as-you-go Plan |
|---|---|---|---|
| Data Transfer Out Total outbound data from ngrok to clients (includes traffic to agents). | Limited to 1 GB/month | 5 GB included (more with credit) | 5 GB included, then $0.10/GB (volume discounts) |
Traffic
| Feature | Free Plan | Hobbyist Plan | Pay-as-you-go Plan |
|---|---|---|---|
| HTTP(S) Requests Maximum HTTP/S requests to your account’s endpoints per month. | Limited to 20,000/month | 100,000 included (more with credit) | 100,000 included, then $1 per 100k (volume discounts) |
| TCP/TLS Connections Connections to your TCP or TLS endpoints per month. | Limited to 5,000/month | 5,000 included (more with credit) | 5,000 included, then $2 per 100k (volume discounts) |
Rate limits (per minute)
| Metric | Free Plan | Hobbyist Plan | Pay-as-you-go Plan |
|---|---|---|---|
| HTTP Request Rate Limit Maximum HTTP requests across all endpoints per minute. | 4,000/min | 20,000/min | 20,000/min (contact ngrok for higher rates) |
| TCP Connection Rate Limit Maximum TCP connections across all endpoints per minute. | 100/min | 150/min | 600/min (contact ngrok for higher rates) |
TLS features
| Feature | Free Plan | Hobbyist Plan | Pay-as-you-go Plan |
|---|---|---|---|
| Bring your own certificates Upload your own TLS certificates instead of ngrok-provisioned certs. | Not available | Not available | $200 per cert/month |
| End-to-End TLS Terminate TLS at your upstream or at the agent for end-to-end encryption. | Not available | Not available | Contact ngrok |
| Mutual TLS (mTLS) Client and server authenticate each other using certificates. See Traffic Policy. | Not available | Not available | Available (see Traffic Policy) |
Traffic Policy
| Feature | Free Plan | Hobbyist Plan | Pay-as-you-go Plan |
|---|---|---|---|
| Traffic Policy Units (TPUs) Actions, macros, and variables applied to requests (WAF, mTLS, etc.). Billed in 100k blocks. | $1 per 100k (against credit) | $1 per 100k (against credit) | $1 per 100k with volume discounts |
Traffic identity
| Feature | Free Plan | Hobbyist Plan | Pay-as-you-go Plan |
|---|---|---|---|
| Traffic Identities (OAuth/SAML/OIDC) End users that authenticate via Traffic Policy. Measured in Monthly Active Users (MAUs). | 3 MAUs/month | 5 MAUs/month | 5 MAUs included, then $1 each (volume discounts available) |
Traffic observability
| Feature | Free Plan | Hobbyist Plan | Pay-as-you-go Plan |
|---|---|---|---|
| Traffic Inspector Retention Number of hours your traffic data is retained in Traffic Inspector. | 24 hours | 72 hours | 72 hours (purchase add-on for more retention) |
| Traffic Log Exporting Export event logs to S3, Datadog, Azure Logs, CloudWatch Logs, and more. | Not available | Not available | $0.25 per 2k events |
Secure tunnels
| Feature | Free Plan | Hobbyist Plan | Pay-as-you-go Plan |
|---|---|---|---|
| Concurrent Agents Number of agents that can be connected at the same time. | 3 | 3 | Unlimited |
| Dedicated Agent Connect IPs A constant, dedicated IP for your account’s agents. | Not available | Not available | $900 per month per region (contact ngrok) |
| Custom Agent Connect URLs Customize the URL that the agent connects to. | Not available | Not available | $250 per month per URL (contact ngrok) |
| Remote Agent Update Operations Run ngrok as a service; remotely stop, restart, or update agents from the Dashboard. | Stop, Restart | Stop, Restart | Stop, Restart, Update |
Identity & access
| Feature | Free Plan | Hobbyist Plan | Pay-as-you-go Plan |
|---|---|---|---|
| Users Members of your account who can view or create endpoints. | 1 | 1 | 3 included, then $5 per user |
| Service Users Accounts for automated systems (agents, API). Do not count as users. | Not available | Not available | Unlimited at no extra charge |
| SSO/RBAC Federate auth to your IdP with SAML or OpenID Connect. | Not available | Not available | $10 per user/month (must be applied to all users) |
| Identity and Access Governance Suite SCIM, Domain Controls, Account-Wide IP Restrictions, Audit Logs. | Not available | Not available | $15 per user/month (all users) |
| Authtoken ACLs Restrict what endpoints an authtoken can create. | Not available | Not available | Included |