osmRouter pins a public hostname to a local process on your machine — through a persistent reverse tunnel that survives reboots, IP changes, and CGNAT.
No credit card · Free tier includes 1 domain, 1 device · 10 GB/mo
~ / api.acme.co
$ osmrouter expose 3000--domain api.acme.co
→ resolving DNS…
→ binding mac-studio-01 to api.acme.co
✓ tunnel established · edge=fra1 · 42ms
https://api.acme.co → localhost:3000
Your domain, your control
Point a CNAME at osmRouter once and forget about it. Subdomains provision instantly without touching your registrar again.
Device-locked tunnels
Each domain binds to one authenticated device. Stolen laptop? Revoke the token and every tunnel terminates in milliseconds.
Edge-routed traffic
Connections terminate at the nearest of 14 edge nodes, then ride a persistent QUIC tunnel back to the device.
mTLS by default
Mutual TLS between every client and edge. No shared secrets, no rotating certs, no plaintext anywhere on the path.
Scoped API keys
Programmatic access with per-domain scopes. Generate, rotate, and revoke from the dashboard or CLI.
Per-request telemetry
Every request gets latency, edge node, and device-side response time. Search 30 days of logs in milliseconds.