Custom domains and automatic TLS
Connect your own domain; certificates are issued and renewed automatically via Let's Encrypt. Or start with a free name--slug.zorven.app address.
app.yourco.com -> localhost:3000 TLS: automatic
New: Zorven Network and zero-trust access
From localhost to your company network,
From localhost to your company network,
every connection under your control.
Publish local services on your own domain with one command, join your devices into a private network, and manage access with your own rules. Your traffic never passes through a third-party cloud.
No credit card on Free
Open core (AGPLv3)
macOS · Linux · Windows
$curl -fsSL https://zorven.app/install.sh | sudo bash -s -- --token zrv_live_...
Downloads and installs the client.
If you omit the token, the script asks for it in the terminal.
PS>irm https://zorven.app/install.ps1 | iex
Downloads and installs the client.
Next: zorven authtoken <token>
$zorven http 3000
Durum: Cevrimici (Online)
Genel URL: https://name--slug.zorven.app
Yerel Hedef: http://localhost:3000
Automatic HTTPS · WebSocket, HTTP/2 and SSE supported (the client prints these status labels in Turkish) (the client prints these status labels in Turkish) (the client prints these status labels in Turkish) (the client prints these status labels in Turkish)
$zorven ephemeral 3000
Gecici tunel: 2h0m0s sonra kendiliginden kaldirilacak.
Genel URL: https://name--slug.zorven.app
Deletes itself when it expires — built for demos and PR previews
Who is it for?
Start with how you work.
From a home server to a company fleet, it is one platform. Use as much of it as you need.
Personal
A home server, NAS, game server or personal site, without touching your router.
- No port forwarding; works behind CGNAT
- Free name--slug.zorven.app address with HTTPS
- Windows desktop app
Developers
Test webhooks, demo to clients, point a mobile app at your local API.
- An HTTPS URL in seconds
- Request inspector with one-click replay
- REST API, OpenAPI 3.1, API tokens
Business and teams
Data stays on your server, with role- and policy-based access.
- Self-hosted, data residency
- Organizations, projects, SSO and 2FA
- Device fleet and access policies
Request inspector
See every incoming request. Replay it in one click.
Inspect headers and bodies in the panel and resend a webhook to your local server. The data below is a sample.
panel.zorven.app · Request stream (sample data)METHOD / STATUSTIME
POST https://name--slug.zorven.app/webhooks/payment
Request headers
Host: name--slug.zorven.app Content-Type: application/json User-Agent: payment-service/1.0 X-Request-Id: 8f3a21c0
Request body
{
"event": "payment.completed",
"amount": 4900,
"currency": "USD"
}GET https://name--slug.zorven.app/api/v1/profile
Request headers
Host: name--slug.zorven.app Accept: application/json Authorization: Bearer ******
Request body
(no body)
GET https://name--slug.zorven.app/favicon.ico
Request headers
Host: name--slug.zorven.app Accept: image/*
Request body
(no body)
Features
Much more than a tunnel.
Tunnels, private networking and access control in one panel, all on your own server.
HTTP, TCP, UDP, SNI
From web services to databases, SSH to game servers: raw TCP, SNI mode and UDP tunnels.
Policy engine
Apply rate limit, deny, redirect, set_header, require_mTLS, WAF and webhook signature verification rules from the panel, no code (Pro+).
Private network (Zorven Network)
Join offices and devices without exposing them to the internet; reach them through a local SOCKS5 proxy (Team+).
zorven connect
Device fleet and policies
Tag devices, manage agent configuration centrally, and write resource policies by tag and role.
Request inspector and replay
Inspect the headers and body of every incoming request in the panel and resend a webhook to your local server in one click, then compare responses with replay diff.
Teams, projects and SSO
Organization and project structure, owner/admin/member roles, email invitations, OIDC SSO and 2FA.
Secret Vault
Store keys and passwords encrypted in the panel and reference them by name in policies such as webhook signature verification (Pro+).
Load balancing and health checks
Spread traffic across multiple targets with round robin, weighted, least-connections or latency strategies, and take unhealthy ones out of rotation with HTTP/TCP health checks (advanced LB: Team+).
Remote terminal and screen
Reach your own computer's terminal and screen straight from the panel: pick any shell on the machine (bash, zsh, fish, PowerShell, cmd, WSL) and work in tabs; leaving the page doesn't end the session, so you pick up where you left off. On by default in the desktop app; in the CLI you enable it with --enable-terminal.
API and service accounts
Full REST API and OpenAPI 3.1; scoped, expiring, rotatable tokens. Wire it into CI/CD with service accounts; Node and Python SDKs are available too (Pro+).
Self-hosted, open core
Traffic and data stay on your own server. The core is open under AGPLv3; read the code and run it on your infrastructure.
Branded visitor login
On a protected HTTP tunnel, visitors get a Zorven-styled login page instead of the browser password popup: username and password, or continue with Google / GitHub. Light and dark theme, mobile friendly.
Open the door from the web
On a raw TCP/UDP tunnel the visitor signs in on the web and only their own IP address reaches the port for the duration you choose. Connections without a grant are silently dropped (Pro+).
Use it in mail apps
Open your platform mailbox in the Gmail app, Outlook, Apple Mail or Thunderbird over IMAP/SMTP with an app password.
How it works
Live in three steps.
-
Install
Install the client with one command, or grab the Windows desktop app.
curl -fsSL https://zorven.app/install.sh | sudo bash -
Connect
Get a token from the panel and pair your device with your account.
zorven authtoken <token> -
Publish and share
Open your local port and your HTTPS URL is ready.
zorven http 3000
Pricing
Start free, upgrade as you grow.
Monthly plans. Going over quota slows you down; it never cuts you off.
Free
$0 / mo
- 2 tunnels, 2 clients
- 5 GB traffic
- 1 day log retention
Hobby
$5 / mo
- 5 tunnels, 5 clients
- 1 custom domain
- 20 GB traffic
Popular
Pro
$12 / mo
- 20 tunnels, 15 clients
- 5 custom domains, 100 GB traffic
- Policy engine, API, Secret Vault
- 7-day free trial
Team
$29 / mo
- 50 tunnels, 50 clients
- 50 custom domains, 250 GB traffic
- Zorven Network, log export
- 5 members, 50 projects
Enterprise
Unlimited resources, zero-trust access conditions, setup support on your own infrastructure and 90-day log retention.
Compared with alternatives
How does Zorven compare with the alternatives?
A fair comparison using only points we could verify on official pages. Each tool is strongest in a different area.
| Feature | Zorven | ngrok | Cloudflare Tunnel | Tailscale | Pangolin |
|---|---|---|---|---|---|
| Self-hosting | Yes (AGPLv3 open core) | No (SaaS) | No (the service runs on Cloudflare; the cloudflared client is Apache-2.0) | Partly (client is open source) | Yes (AGPL-3 community; commercial EE) |
| Free plan | 2 tunnels, 5 GB/mo | 1 GB/mo, 3 endpoints | Zero Trust: up to 50 users* | Personal: up to 6 users | Basic: up to 5 users |
| Cheapest paid plan | Hobby $5/mo (per plan) | Hobbyist $10/mo; PAYG $20/mo + usage | $7/user/mo* | Standard $8/user/mo (Premium $18) | Team $4/user/mo (Business $9) |
| Custom domain | From Hobby | From PAYG | Unclear | Not on Funnel (ts.net only) | From the free Basic plan |
| HTTP / TCP | Yes / Yes (raw TCP, SNI) | Yes / Yes (TCP needs a card) | Yes* / via private network* | Funnel: TLS only; ports 443, 8443, 10000 | Yes / Yes |
| UDP | Yes | Not documented | Via private network (WARP)* | Unclear | Yes |
| Request inspection and replay | Yes | Yes (replay needs Full Capture) | Unclear | Unclear | Unclear |
| Private network | Yes (Team and above) | Unclear | Yes | Yes (core product) | Yes |
| Where traffic flows | Your own server (self-hosted) or the hosted service | ngrok edge | Cloudflare edge | Mostly direct (p2p); Funnel uses relays | Your own server (self-hosted) |
| Global edge network | No (single server) | Yes | Yes | Relay network | No (your own server) |
Scroll the table sideways to see every tool.
As of October 2026, based on official pricing pages; prices may change. Zorven plans are priced per plan, not per user; for the others the price is mostly per user. “Unclear” and “Not documented” mean we could not find clear information in official documentation; they do not mean the tool lacks the feature.
* Based on secondary sources, not separately verified on an official page. ngrok and Cloudflare are stronger on a global edge network and a mature ecosystem; Tailscale is more mature as a mesh VPN.
Sources: ngrok · ngrok limits · ngrok traffic inspection · Tailscale pricing · Tailscale Funnel · Pangolin pricing · Pangolin GitHub · Cloudflare Tunnel docs
FAQ
Frequently asked questions
It exposes your local services (HTTP, TCP, UDP) to the internet with one command, joins your devices into a private network, and lets you decide who reaches what through policies. Everything is managed from a single panel.
Zorven is self-hosted: your tunnel traffic stays on your own server and never passes through a third-party cloud. The hosted service at zorven.app runs on a server in Istanbul, and you can also run the code on your own infrastructure.
No. The client connects outward, so no port forwarding is needed. It works behind CGNAT and dynamic IPs too.
Yes. Free costs $0 and needs no credit card: 2 tunnels and 5 GB of traffic. If you exceed the quota, speed is reduced but your connection is not cut. Pro includes a 7-day free trial.
Yes. Connect 1 custom domain on Hobby, 5 on Pro and 50 on Team. TLS certificates are issued and renewed automatically.
The core is open source (AGPLv3), so you can read the code on GitHub and run it on your own server. Enterprise also includes setup support on your own infrastructure.