Broch
Secure tunnels on your own infrastructure — authenticated through your SSO, attributed to a developer, logged to your systems. Self-hosted, free trial.
A startup from Brookline, the United States that is founded by Nick Caramello.
Secure tunnels on your own infrastructure — authenticated through your SSO, attributed to a developer, logged to your systems. Self-hosted, free trial.
A startup from Brookline, the United States that is founded by Nick Caramello.
This page is designed to help you find out whether Broch is good and if it is the right choice for you.
Broch Share is a secure tunneling platform you deploy on your own infrastructure. Developers share a local service over HTTPS or receive webhooks with a single CLI command. Tunnels run through a server in your own cloud account, so traffic never passes through a third party.
Every tunnel is tied to a user in your identity provider (Entra ID, Okta, Auth0 or any OIDC provider). Policy is deny by default: admins decide who may create tunnels, by role, network or header rules. Sign-ins, tunnel connections, policy decisions and admin changes go to an always-on JSON audit log that you can send to your own monitoring or SIEM.
Broch deploys as a single VM that issues and renews its own wildcard TLS certificate, from the Azure Marketplace, Azure Bicep, AWS CloudFormation or Docker Compose on any Linux host. The CLI runs on macOS, Linux and Windows and includes a local request inspector with replay for webhook debugging.
Broch Share costs $10 per active user per month, where an active user is anyone who opens a tunnel that month. There's no per-tunnel metering and no overage charge. Free trial available.
Listed in
Deployment
Self-hosted in your own cloud: Azure Marketplace, Azure Bicep, AWS CloudFormation or Docker Compose
Single Sign-On (SSO)
OIDC: Entra ID, Okta, Auth0 or any OIDC provider
Access Control
icy Deny by default. Admins decide who can create tunnels, by role, network (CIDR) or header rules
Audit Log
Always-on JSON audit log of sign-ins, tunnels, policy decisions and admin changes
Logs
Datadog, Seq, OpenTelemetry
Request inspection
Local inspector with replay for webhook debugging
Command Line Interface
macOS, Linux and Windows, installed through npm (Node.js 22+)
Data Residency
Traffic never passes through a third party. The only outbound call is a license check
TLS Support
Automatic Let's Encrypt wildcard certificate, or bring your own
Developers open tunnels to the internet every day for webhooks, mobile testing, demos and collaboration. Usually that means a third-party cloud, where a shareable URL is the only protection and nobody keeps a record of who opened what.
Broch started in 2024 on a simple principle: build the tools we need ourselves, the way companies need them to work.
Broch Share is our first product. It keeps the one-command convenience developers expect, and runs it on the company's own infrastructure, behind its own SSO, with an audit trail. Broch moved from a private alpha in early 2025 to a public beta later that year, and became generally available for self-hosting in 2026.
Broch Share gives developers ngrok-style tunnels that run entirely on your own infrastructure. Every tunnel is created by a named user signed in through your identity provider. Nothing is allowed until an admin's policy allows it. Every connection is recorded in an audit log that goes to your own systems. Traffic never passes through a third party.
We are focused on one thing: you own your data and your security.
Developers open tunnels to the internet every day for webhooks, mobile testing, demos and collaboration.
Usually that means a third-party cloud, where a shareable URL is the only protection and nobody keeps a record of who opened what. Broch started in 2024 on a simple principle: a URL by itself is not a security boundary. The goal was to keep the one-command convenience developers expect, and run it on the company's own infrastructure, behind its own SSO, with an audit trail. Every decision we make asks the question - what would I want if I were running this product.
Broch moved from a private alpha in early 2025 to a public beta later that year, and became generally available for self-hosting in 2026.
Broch Share has two audiences:
We have collected here some useful links to help you find out if Broch is good.
Check the traffic stats of Broch on SimilarWeb. The key metrics to look for are: monthly visits, average visit duration, pages per visit, and traffic by country. Moreoever, check the traffic sources. For example "Direct" traffic is a good sign.
Check the "Domain Rating" of Broch on Ahrefs. The domain rating is a measure of the strength of a website's backlink profile on a scale from 0 to 100. It shows the strength of Broch's backlink profile compared to the other websites. In most cases a domain rating of 60+ is considered good and 70+ is considered very good.
Check the "Domain Authority" of Broch on MOZ. A website's domain authority (DA) is a search engine ranking score that predicts how well a website will rank on search engine result pages (SERPs). It is based on a 100-point logarithmic scale, with higher scores corresponding to a greater likelihood of ranking. This is another useful metric to check if a website is good.
The latest comments about Broch on Reddit. This can help you find out how popualr the product is and what people think about it.
Do you know an article comparing Broch to other products?
Suggest a link to a post with product alternatives.
Is Broch good? This is an informative page that will help you find out. Moreover, you can review and discuss Broch here. The primary details have been verified within the last quarter. So they could be considered up to date. If you think we are missing something, please use the means on this page to comment or suggest changes. All reviews and comments are highly encouranged and appreciated as they help everyone in the community to make an informed choice. Please always be kind and objective when evaluating a product and sharing your opinion.
