
ngrok
localhost.run
LocalXpose
Portmap.io
Pagekite
Packetriot
Pinggy.io
An open source serveo/ngrok alternative. HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.

cors.sh
Corsfix
CORS Anywhere
All Origins
corsproxy
crossorigin.me
CRProxy
Managed CORS proxy with API keys, rate limits, and SSRF protection, or self-host the open-source Go runtime for free.

Which is more popular?
Based on our record, sish seems to be more popular. It has been mentioned 18 times since March 2021.
Website, pricing, platforms and company facts side by side.
|
|
|
|
|---|---|---|
| Website | github.com | corsproxy.dev |
| Pricing | — | |
| Company | — | Startup from The United Kingdom · 2026 |
| Listed in |
In their own words, as submitted to SaaSHub.


No description of sish yet.
corsproxy.dev adds CORS headers to any API response so browser frontends can call third-party APIs directly, without building and running your own proxy. Hosted: Sign up, create an API key, start sending requests. Per-key rate limits, request logs, a dashboard, and a daily quota on the free plan,...
What each product offers, as listed by its team.


Possible disadvantages
No features have been listed yet.
An editorial look at what each product does well and who it suits.


Overall verdict
Why this product is good
Recommended for
No analysis of CorsProxy.dev yet.
How often each product is chosen within a category, 0–100% relative to the other.


As answered by people managing sish and CorsProxy.dev.
CorsProxy.dev's answer:
It's a managed CORS proxy that blocks requests to private IPs, loopback, and cloud metadata endpoints (SSRF protection) by default — most CORS proxies don't do this at all, hosted or self-hosted. The hosted API and the self-hosted binary run the same open-source Go core, so you can start on the free managed tier and move to self-hosting later without changing how you call it. It also runs a remote MCP server, so AI agents (Claude Code, Cursor) can call third-party APIs through your key without ever seeing the upstream secret.
CorsProxy.dev's answer:
Most free CORS proxies (corsproxy.io, allorigins, cors-anywhere) are unmanaged public relays with no auth, no logs, and no SSRF protection — fine for a demo, risky for production. CorsProxy.dev gives you per-key auth, rate limits, request logs, and a dashboard on a free tier, plus an open-source self-host path (MIT) if you'd rather not depend on a hosted service at all.
CorsProxy.dev's answer:
Go (self-hosted / open-source core), TypeScript on Cloudflare Workers (hosted SaaS), Cloudflare KV, D1, and Durable Objects for rate limiting.
CorsProxy.dev's answer:
Frontend and full-stack developers who need their browser app to call a third-party API that doesn't send CORS headers — indie hackers and small teams shipping fast without standing up a backend just to proxy one API call, plus developers wiring AI agents up to external APIs.
Share your experience with using sish and CorsProxy.dev. For example, how are they different and which one is better?
Recommendations tracked on public social media and blogs since March 2021.


A number of years ago, I created a fully open source (MIT) project called sish [0] that does just this. Sish is a SSH server written specifically for tunneling. You get all of the benefits of SSH, but also automatic TLS, a web console of... - Source: Hacker News / 15 days ago
Sish is an SSH-based solution that is simple to deploy and use. - Source: dev.to / about 1 year ago
We’re actually using Unix sockets as the underlying transport layer for this. We’re also not using sshd, we custom wrote our own daemon that’s entire job is tunneling. If you’re curious about this, you can find the project here:... - Source: Hacker News / over 1 year ago
Tracking CorsProxy.dev since Sep 2026.
When comparing sish and CorsProxy.dev, you can also consider the following products.

ngrok enables secure introspectable tunnels to localhost webhook development tool and debugging tool.
Compare ngrok to sish or CorsProxy.dev:

The only cors proxy service that you'll ever need.
Compare cors.sh to sish or CorsProxy.dev:

Instantly share your localhost environment!
Compare localhost.run to sish or CorsProxy.dev:

CORS Proxy by Corsfix lets you instantly fetch any resource and bypass CORS errors, so you can focus on building great websites.
Compare Corsfix to sish or CorsProxy.dev:

Your network without the IT work. Radically simple, always-on tunneling service for mission-critical applications.
Compare LocalXpose to sish or CorsProxy.dev:

CORS Anywhere is a NodeJS proxy which adds CORS headers to the proxied request.
Compare CORS Anywhere to sish or CorsProxy.dev: