New — Iris AI drafts your firewall, routing & rate-limit rules. Explore AI features →
Ngris vs ngrok, Cloudflare Tunnel & others
Looking for a ngrok or Cloudflare Tunnel alternative? See why teams switch to Ngris — traffic replay, static egress IPs, a built-in WAF, and identity-aware SSO are included, not billed as add-ons.
Price comparison at a glance
$10/mo
Ngris Team
25 endpoints, 50 GB, WAF, SSO, RBAC
$8/mo
Others — base plan
3 endpoints, 5GB, no WAF, no SSO, no custom domains.
$50+/mo
Others + add-ons
The same features Ngris includes, billed as extras.
Feature-by-feature comparison
| Feature | Ngris | Others |
|---|---|---|
| Protocols | ||
| HTTP/1.1 | ||
| HTTP/2 | ||
| HTTP/3 / QUIC | ||
| TCP tunneling | ||
| UDP tunneling | Limited | |
| WebSocket | ||
| Security & Firewall | ||
| WAF / Firewall | Included | Paid add-on |
| Rate limiting | Built-in | Paid add-on |
| Circuit breaker | ||
| JWT validation | ||
| API key auth | ||
| IP restrictions | ||
| Custom error pages | ||
| Edge caching | ||
| Identity & Access | ||
| Per-endpoint auth (6 modes) | Basic | |
| Per-endpoint RBAC | Built-in | Paid per user |
| OAuth providers (Google, GitHub, Azure, Okta) | Limited | |
| SSO / SAML | Built-in | Paid per user |
| MFA / 2FA | ||
| Team members | Enterprise | |
| Traffic & Observability | ||
| Traffic inspector | ||
| Request replay | ||
| AI traffic analysis | ||
| Multi-agent load balancing | ||
| Routing rules (path, header, IP) | ||
| TLS & Certificates | ||
| Auto ACME (Let's Encrypt) | ||
| Custom TLS certificates | Free | Paid add-on |
| Wildcard endpoints | ||
| Billing & Business | ||
| Integrated billing (Stripe) | ||
| Support / helpdesk | Built-in | Paid add-on |
| Interstitial page (ads) | Never | Free tier |
Real-world cost: typical production setup
5 endpoints, WAF, SSO for 3 users, custom domains, traffic inspector.
$10/mo
Ngris Team
Everything included — no add-on fees.
$70+/mo
Others (base + add-ons)
Base plan + WAF + SSO + domains + support.
Switch in 60 seconds
1
Install Ngris
One egress-only binary — no daemon, no inbound ports.
curl -fsSL https://ngris.com/install.sh | sh2
Same CLI pattern you know
Point the agent at a local port and you're live on the edge.
ngris http 30003
WAF, SSO, inspector & replay — automatically
No extra config needed. All features enabled out of the box.
No paywall. No sales call.
Get started in 60 seconds. No credit card, no interstitial page — just tunnels.