Draft:Ngrok, Inc
Submission declined on 28 October 2025 by Theroadislong (talk).
Where to get help
How to improve a draft
You can also browse Wikipedia:Featured articles and Wikipedia:Good articles to find examples of Wikipedia's best writing on topics similar to your proposed article. Improving your odds of a speedy review To improve your odds of a faster review, tag your draft with relevant WikiProject tags using the button below. This will let reviewers know a new draft has been submitted in their area of interest. For instance, if you wrote about a female astronomer, you would want to add the Biography, Astronomy, and Women scientists tags. Editor resources
|  |
| Submission declined on 28 October 2025 by Somepinkdude (talk). This draft's references do not show that the subject qualifies for a Wikipedia article. In summary, the draft needs multiple published sources that are: Declined by Somepinkdude 6 days ago.
| |
Comment: Please read WP:REFBOMB. Adding so many references to the company's promotional pages is not appreciated, and makes this appear more like an advertisement than an article. Please remove those references before you resubmit, or it will almost certainly be declined again. Somepinkdude (talk) 03:49, 28 October 2025 (UTC)
- Comment: In accordance with Wikipedia's Conflict of interest policy, I disclose that I have a conflict of interest regarding the subject of this article. Samwhoo (talk) 13:06, 18 September 2025 (UTC)
ngrok, Inc is an American software company headquartered in San Francisco, California..[1]. The company develops ngrok, a globally-distributed API gateway and reverse proxy with a web-based management interface.
| Company type | Private |
|---|---|
| Founded | 2015 |
| Founder | Alan Shreve |
| Headquarters | San Francisco, California |
| Website | https://ngrok.com |
| Key People | Alan Shreve (CEO), Peter Shafton (CTO), Heather McLinden (Chief People Officer), Sam Richard (Chief Revenue Officer), Guru Chahal (Board Member) |
History
[edit]The ngrok (pronounced "en-grock", /ˈɛn.ɡrɒk/) software was originally created in March 2013[2] by the company's founder-to-be Alan Shreve. It was created as an exercise to learn the Go programming language[3], and was a port of the tool localtunnel[4] created by Jeff Lindsay whom Alan worked with at Twilio.
ngrok started off as an open source project under the Apache 2.0 license, transitioning later to be closed source with the release of ngrok 2.0 in April 2015[5].
ngrok 2.0 was a full rewrite of ngrok 1.0 to get away from early mistakes made in 1.0, and to make it possible for ngrok to be deployed in a multi-region configuration[6].
In July 2015 ngrok LLC was registered in California[7]. The company was later incorporated in Delaware on January 1st 2022[8].
In December 2022 ngrok, Inc. raised $50 million in a Series A led by Lightspeed Venture Partners with participation from Coatue Management[9].
Products and Services
[edit]ngrok provides a unified gateway for applications on the internet, with the ability to provide a single interface no matter where the application is deployed.
Globally distributed load balancing
[edit]ngrok is built on top of AWS[10] and has points of presence in 8 regions: Singapore, Sydney, Frankfurt, Mumbai, Tokyo, São Paolo, Ohio, California[11]. Requests to services behind ngrok are load balanced to the closest location to where the request originated. By default, TLS termination is also done at the closest location to the request origin.
Authentication
[edit]ngrok integrates with OAuth providers, giving you the option to require authentication for your services[12]. OIDC is also supported[13].
Mutual TLS
[edit]ngrok supports mutual authentication through mTLS[14], allowing you to restrict access to only trusted clients.
Kubernetes Operator
[edit]ngrok offers a Kubernetes Operator you can install in your cluster to create ngrok-managed Ingress resources[15]
Monitoring
[edit]ngrok offers the ability to monitor HTTP traffic through a web-based dashboard[16]. Data that's visible by default includes request path, request method, originating IP address, status code, and duration. Full request and response body logging is available through settings.
Use in cyber attacks
[edit]From as early as 2014, ngrok has been used in malicious ways[17]. ngrok offers a free and verified HTTPS endpoint that you can use to host whatever you want, this has been abused to host phishing pages masquerading as Google[18] and Facebook[19]. It was used to distribute the Lokibot malware[20]. It has been used in cryptomining attacks[21]. It was used by the Cozy Bear hacking group for command and control[22]
References
[edit]- ^ "Privacy Policy". ngrok.com. ngrok, Inc. Retrieved September 15, 2025.
- ^ "first commit". GitHub. March 2013. Retrieved September 15, 2025.
- ^ "The Changelog #210: ngrok, ngrok, ngrok with Alan Shreve". The Changelog (Podcast). August 19, 2016. Event occurs at 27:10. Retrieved September 15, 2025.
- ^ "progrium/localtunnel". GitHub. Retrieved September 15, 2025.
- ^ "ngrok 2.0". Product Hunt. April 2015. Retrieved September 15, 2025.
- ^ "The Changelog #210: ngrok, ngrok, ngrok with Alan Shreve". The Changelog (Podcast). August 19, 2016. Event occurs at 48:08. Retrieved September 15, 2025.
- ^ "Business Search". California Secretary of State. State of California. Retrieved September 15, 2025. Entity ID: 201521010309
- ^ "Entity Search". Delaware Division of Corporations. State of Delaware. Retrieved September 15, 2025. Entity ID: 4599079
- ^ Butcher, Mike (December 13, 2022). "ngrok, a service to help devs deploy sites, services and apps, raises $50M". TechCrunch. Retrieved September 15, 2025.; "Reverse proxy startup ngrok raises $50M in funding". SiliconANGLE. December 13, 2022. Retrieved September 15, 2025.; "ngrok raises $50M for Ingress as a Service". ngrok.com. December 13, 2022. Retrieved September 15, 2025.
- ^ "131: How to Grow a Developer Tool from a Side Project". Compressed.fm (Podcast). Event occurs at 30:45. Retrieved September 15, 2025.
- ^ "Points of Presence". ngrok Documentation. ngrok, Inc. Retrieved September 15, 2025.
- ^ "OAuth". ngrok Documentation. ngrok, Inc. Retrieved September 15, 2025.
- ^ "OIDC". ngrok Documentation. ngrok, Inc. Retrieved September 15, 2025.
- ^ "Agent Mutual TLS Termination". ngrok Documentation. ngrok, Inc. Retrieved September 15, 2025.
- ^ "Kubernetes Operator". ngrok Documentation. ngrok, Inc. Retrieved September 15, 2025.
- ^ "Traffic Inspection". ngrok Documentation. ngrok, Inc. Retrieved September 15, 2025.
- ^ Shreve, Alan (May 29, 2014). "Automate Away Your Problems: Combatting Illegal Abuses of ngrok". inconshreveable.com. Retrieved September 15, 2025.
- ^ Shreve, Alan (May 29, 2014). "Automate Away Your Problems: Combatting Illegal Abuses of ngrok". inconshreveable.com. Retrieved September 15, 2025.
- ^ "Ngrok Platform Abused by Hackers to Deliver a New Wave of Phishing Attacks". Cyble. 15 February 2021. Retrieved September 15, 2025.
- ^ "Digital Criminals Abusing Secure Tunneling Service to Deliver LokiBot". Security Boulevard. May 2019. Retrieved September 15, 2025.
- ^ "Cryptojacking Attacks Summer 2023". Wiz. 2023. Retrieved September 15, 2025.
- ^ "Russian hackers use ngrok feature and WinRAR exploit to attack embassies". BleepingComputer. Retrieved September 15, 2025.
- in-depth (not just passing mentions about the subject)
- reliable
- secondary
- independent of the subject
Make sure you add references that meet these criteria before resubmitting. Learn about mistakes to avoid when addressing this issue. If no additional references exist, the subject is not suitable for Wikipedia.