The ngrok blog
Subscribe to our newsletter or follow our RSS feed for the latest news about unified ingress for development and production.
How Vijil built a trust layer for my first AI agent
Vijil’s platform tests your in-development agents against failure modes like prompt injection, PII leaks, and hallucinations—with a bit of help from ngrok.
API gateway shapes: back then, now, and beyond
Explore eight new gateway patterns—from CI/CD previews to multi-model AI—that show why gateways are no longer prod-only infrastructure.
By Joel Hans
September 16, 2025
ngrok-operator v0.20.0: Go SDK v2 and edges removal
This release drops legacy CRDs, moves to ngrok-go v2, and cleans up old code as we prepare for ngrok-operator v1.0.
September 10, 2025
The ngrok cheatsheet
How to run ngrok with Slack webhook authentication? GitHub OAuth? How to serve files? This cheat sheet shows you what else you can do with ngrok!
September 9, 2025
Secrets for Traffic Policy now in Open Beta
Manage sensitive values securely, reuse them across policies, and rotate them without editing policies—now open to everyone who's open to using the ngrok CLI!
August 27, 2025
ngrok is now HIPAA-compliant
HIPAA compliance opens ngrok for healthcare workloads—API gateways, webhook handling, and remote access with ePHI securely in transit.
August 25, 2025
Self-hosted local AI workflows with Docker, n8n, Ollama, and ngrok
The shortest path to the best of all worlds: AI-driven automation, simple deployments with containers and a GUI, and a gateway to knit it all together securely.
By Joel Hans
August 20, 2025
Smithery is shaping the agent-first internet—for builders and bots alike
Smithery is building tools to help you build, test, and distribute your MCPs on one side, and a "Google for MCPs" on the other—here's how they do it with ngrok.
By Joel Hans
August 19, 2025
Terminate requests to your endpoint with the close-connection action
While you can send a "no thanks" error code and response body, close-connection is perfect for situations where you'd rather just definitively close the door.
August 19, 2025
Block threats before they reach your services with our new WAF actions
Two new Traffic Policy actions, powered by OWASP CRS, drop malicious requests and responses at the edge, with no extra WAF service required.
August 18, 2025
ngrok-operator v0.19.0: Gateway API updates and edge deprecation
We've brought .Status.Addresses for ExternalDNS, gateway status conditions that match community standards, and are prepping for the EOL of edges.
August 14, 2025
Our approach to always evolving dev tools for speed and clarity
The story of `nd`, why we surface what’s happening under the hood, and lean on proven tools so developers can work faster and troubleshoot smarter.
By James Szalay
August 13, 2025
Five ways ngrokkers 'doglab' gateways for homelabs and side projects
How do they build gateways to route and authenticate traffic to blogs, OSS analytics services, photo-sharing apps, and much more with Traffic Policy?
The ngrok Docker Desktop Extension: instant endpoints for your local containers
From Docker Desktop, start an endpoint for your local containerized APIs or apps, then apply rules for auth, routing, or rate limits without leaving the UI.
August 8, 2025
From nginx to ngrok: Dogfooding our own website with Traffic Policy
We built an API gateway, then turned it on ourselves. Here's the full story of how we replaced nginx and now host ngrok.com with Kubernetes and Traffic Policy.
ngrok is now available in the Microsoft Store
Securely install ngrok via the Microsoft Store for automatic updates and compatibility with app management tools.
By Russ Savage
August 6, 2025
How to write policies with patterns that scale
Tips for making your Traffic Policy easier to read, debug, and evolve, without rewriting it every time your requirements shift.
By Joel Hans
July 22, 2025
Introducing http-request: Call your services directly from Traffic Policy
Trigger internal services, validate requests, log events, connect to AI APIs, and generally give your gateway a brain with the new http-request action.
Decouple policy from sensitive data: introducing Secrets for Traffic Policy
Secrets let you define and manage sensitive values in secure vaults—no more hardcoding or repetitive edits during regular credential rotations.
Shinobi's shortcut to AI-powered pentests in staging and dev envs
Shinobi’s AI red team agents test apps before attackers do, and with ngrok's Traffic Policy, they can integrate with customer's unique topology in minutes.
By Sam Richard
July 1, 2025
