Secure tunneling for teams that need visibility and control.
Developers expose local services to the internet every day — for webhooks, mobile testing, demos, and collaboration. Broch is a secure tunneling platform you deploy on your own infrastructure: authenticated through your SSO, logged to your own systems, every request attributed to a specific developer. Self-hosted Broch is the product, and it starts with a free trial that runs until the 1st of the month, at least 15 days — or try the 60-day Broch-hosted trial (no card) first, before you stand up your own deployment.
Three things we won’t compromise on.
Attribution
A URL by itself is not a security boundary. Every byte through Broch is bound to a developer, a tunnel, a session, a moment in time. Audit is not bolted on; it is the product.
Sovereignty
Your traffic does not leave your network. Self-hosted Broch is the same product we run hosted — same binaries, same code, same auditability. You hold the keys, literally: the BROCH_MASTER_KEY that roots at-rest encryption is generated in your environment and kept in your own secret store. Broch never sees it.
Plain pricing
Priced per active user (pricing), billed monthly through Stripe, after a free trial that runs until the 1st of the month, at least 15 days. No “contact sales for tunnels per hour” math. Buy from inside your own deployment, adjust your active-user limit there after your trial, cancel anytime.
Development philosophy.
Simple to deploy, secure by design, sovereign by default. Four principles, applied consistently.
Security is in the design from day one — OAuth2/OIDC, TLS 1.2+, zero implicit trust. Not bolted on later.
Organizations own their data and infrastructure choices. Self-host on your own boxes, authenticate with your own IdP, ship audit logs to your own SIEM.
One CLI, one Docker image, one license — no vendor ecosystem to buy into.
Full user attribution, structured audit trails, compliance-friendly access patterns by default.
How we got here.
Same Docker image, same code, same audit pipeline as the hosted product — deployed inside your network.
Two inboxes.
Anything you ran into using the product. Bugs, install trouble, license questions.
Feedback, partnerships, press, legal — or anything that doesn’t fit support.
Get under the hood.
The fastest way to understand Broch is to run it. Deploy the appliance into your own Azure or AWS account.