Your service, online.
One command.

No firewall rules. No TLS certificates. Run a single command and your local service is reachable from your devices anywhere you are — securely, automatically.

terminal
$tunls setup eyJzZXJ2ZXJQdWJsS2V5...
> Connectivity verified
? Select target to expose:
http://localhost:3000
http://localhost:5173
Enter custom URL...
> Target reachable
Live at https://myapp.tunls.io

Set it up. Forget about it.

Everything handled for you. No fiddling with certificates, no firewall tinkering.

No TLS headaches

Certificates are generated and renewed automatically. You never touch them.

Secure by default

Mutual TLS keeps everyone out except the devices you authorize. No open ports.

Your own address

Free tunls.io subdomain or bring your own domain. We handle TLS for both.

One command

tunls setup <token>. One command, pick your target, live in seconds.

Stay private

End-to-end encrypted tunnel. Your traffic is yours alone. No snooping.

Always on

Automatic reconnection and health checks. Set it and forget it.

Four steps. One command. Done.

From zero to a live endpoint in under a minute.

01

Create a tunnel

Pick a name and subdomain in the dashboard. Copy your connection token.

02

Copy your token

One string. That's your key. Paste it into the CLI.

03

Run one command

Run tunls setup with your token. Select your local service when prompted.

04

You're live

Your service is reachable at your tunls.io subdomain. That's it.

🇩🇪
🇫🇷
🇮🇹
🇪🇸
🇳🇱
🇧🇪
🇦🇹
🇵🇱
🇸🇪
🇩🇰
🇫🇮
🇵🇹
🇪🇺

EU-sovereign infrastructure

Your data stays in European data centers. Period.

  • Operated under GDPR on EU soil
  • No US cloud providers. No foreign jurisdiction.
  • End-to-end encrypted. We can't see your traffic.

Mutual TLS. No passwords. No logins.

The connection is the authentication.

  • Both sides prove identity with certificates — no passwords to remember
  • Your connection token IS your credential. Nobody can impersonate you.
  • No email, no SSO, no password resets. The CLI authenticates automatically.
  • Lose a token? Revoke it from the dashboard in one click.
Your deviceClient
cert
cert
tunlsServer
proxy
Your applocalhost:3000

tunls is in public beta

Join the waiting list for early access. First users get priority onboarding and extended free tier.

No spam, everEarly access perksCancel anytime