zrok

zrok is developed by NetFoundry on top of OpenZiti, an open-source zero-trust networking SDK that embeds end-to-end encrypted overlay networking into applications. It is an open source Zero Trust networking platform available as SaaS or self-hosted, and it provides private or public, instant, secure tunneling of applications from anywhere. It lets you securely share web services, files and network resources with anyone, and it works through firewalls and NAT without requiring network configuration changes.

The tool supports public URL sharing for webhooks and demos, private peer-to-peer sharing for secure internal access, and file or directory sharing. Private shares can carry TCP and UDP services between zrok users with no public internet exposure, and access can be granted by email address. Public shares can use Google or GitHub OAuth. Supported protocols are HTTP and HTTPS, TCP, UDP and file sharing, and a Go SDK lets you embed sharing into your own applications.

zrok.io is a public service instance operated by NetFoundry using the same code base as self-hosted environments. The self-hosting path is fully documented and gives complete control over relay infrastructure; a single binary and an OpenZiti network are enough to run it, even on a Raspberry Pi. The self-hosted edition is open source under Apache 2.0. The hosted plan is free for builders, developers and small teams with no credit card required, and NetFoundry offers commercial options for production workloads. It runs on Windows, macOS, Linux and Raspberry Pi.