Skip to content
§ BROCH SHARE

HTTP tunnels. On your Azure VM.

Share localhost over HTTPS. Receive webhooks on your own appliance. Your IdP authorizes who may create a tunnel.

No Broch deployment fee. A free trial, then priced per active user (pricing). You need an Azure subscription, a DNS zone you control and an OIDC identity provider.

Your Infrastructure. Your Policy.

Broch runs on a single VM in your Azure subscription. Your application traffic passes through the appliance you control.

Share Localhost

Give a local HTTP service a public HTTPS URL for team demos and integration testing.

Test Webhooks

Receive callbacks through your own Broch deployment. Capture and replay requests with broch share my-app --target http://localhost:3000 --inspect.

Control Creation

Grant tunnel creation through your IdP and admin-assigned policies. Keep the audit trail in your infrastructure.

From Marketplace to First Tunnel

Fill in the Marketplace form

Your DNS zone, your identity provider and a VM size (Standard_B2s recommended). First boot takes about 3–10 minutes, wildcard TLS included.

Start your trial

Your first admin signs in through your IdP. The setup wizard starts the trial: free until the 1st of the month, at least 15 days, for up to 10 active users.

Open a tunnel

An admin assigns a Share Policy to your developers’ IdP group. They install the CLI, sign in through the same IdP and share a local port. Every request lands in the terminal as it arrives.

$ npm install -g @broch/cli
$ broch config set --server https://broch.{your-domain}
$ broch auth login
$ broch share my-app --target http://localhost:3000
  my-app   ← POST → 201 /api/users (12ms)

What Share Controls

Incoming HTTP requests pass CIDR and header rules. Visitors to a Share URL do not sign in through your IdP. Configure those rules for the service you expose.

compare Broch and ngrok →

Before you deploy.

More questions? Email [email protected].

01What do I need?
An Azure subscription. A wildcard domain on Azure DNS, Cloudflare, Route 53 or Google Cloud DNS, for automatic certificates (or bring your own wildcard certificate). An app registration in your identity provider: Microsoft Entra ID, Okta, Auth0 or any OIDC provider. Starting the trial needs a work email and a card. The Azure guide has the full checklist.
02What does it cost?
The Marketplace offer has no Broch deployment fee. The trial is free until the 1st of the month, at least 15 days, with a card upfront, first charged on that 1st. Then you pay per active user, billed monthly through Stripe: see the pricing page. No per-tunnel metering, no overage. Azure bills you separately for the VM and its resources.
03Do visitors to a Share URL sign in?
No. Developers sign in through your IdP to create tunnels. Requests to a Share URL pass the CIDR and header rules your admin sets, so you decide who can reach each service.
04Does our traffic pass through Broch?
No. Tunnels terminate on the appliance in your subscription. Your server sends Broch licensing data only: usage counts, your hostname and the server version, plus the signing admin’s name and email when you buy. Never your traffic or your developers’ activity. See the Privacy Policy.
05Can I try it before I deploy?
Yes. The Broch-hosted trial runs on our server for 60 days, no card. It uses shared Broch sign-in, not your IdP, so evaluate SSO and Share policies on your own deployment.

Deploy Broch in Your Subscription.

Deploy the appliance from the Azure Marketplace, then sign in and start your trial.

read the Azure deployment guide →