Every feature, no limits, no card. There is no paid tier to upgrade to and no trial to run out — custom domains, edge auth, the managed WAF and the private VPN are all just on.
We used to charge for tunnel count, bandwidth and retention. We don't any more. Security features were never behind a paywall and still aren't.
Two things worth stating plainly. Bandwidth is fair-use guidance, not a meter — we don't throttle or bill per-GB. And browsers visiting a tunnel see a one-time 21tunnel interstitial before the page loads; API, CLI and webhook clients never do.
Both products have unique sweet spots. Here's our honest take on which we win, which we don't.
Us: unlimited tunnels, bandwidth and requests. Every feature included.
ngrok: 3 endpoints, $5 one-time credit, then stops.
Us: included, no charge.
ngrok: paid tiers only — BYO domains land on the $20 plan.
Us: MVP-stage, April 2026.
ngrok: decade-old, extremely reliable.
Us: master-key delegation, scoped child keys, cascade revoke.
ngrok: no first-class agent primitives.
Really. A tunnel is one concurrent agent session, and you can run as many as you like. There was a 3-tunnel cap on the free tier until September 2026; it's gone, along with every other limit.
There is no per-tunnel cap and no meter: we don't throttle and there is no per-GB bill to run up. It's fair-use — if one account ever threatened the platform for everyone else we'd get in touch rather than silently degrade you.
Fair scepticism. What we'll commit to in writing: any change to pricing for an existing account requires 90 days' notice and a grandfathered tier. If paid plans return they'll be for things that cost us real money at scale, not for switching security features back off.
Not currently — checkout is card-based (via our payment processor), monthly or annual. Crypto / wire / lifetime are on the roadmap for enterprise deals; talk to us if the standard checkout doesn't work for your procurement.
Yes — free Pro tier for verified students, maintainers of popular OSS projects, and registered non-profits. Email hey@21tunnel.com with a link to your GitHub or organization and we'll flip the switch within a day.
No. There is no card on file, no trial clock, and no plan to convert you to — signup gives you everything immediately. If you need something we don't do yet, email hey@21tunnel.com. We never convert or charge silently.
Up and running in under a minute, with custom domains, edge auth, reserved subdomains and the managed WAF all switched on from the first request.