ngrok: ngrok Security Disclosure, May 2022
Timeline of updates
- resolved
We had an issue in our Dashboard which leaked info between accounts. If you're affected, we've already emailed you with mitigation steps. Please follow them asap. We support responsible disclosure & transparency: https://blog.ngrok.com/posts/ngrok-security-disclosure-may-2022 We're noting dashboard as degraded to indicate impacted components, but as of May 11, there is no known vulnerability or impact to the dashboard.
From ngrok’s published incident history: for incidents before Rewindex began polling this status page, only the final update text is available.
Archive proof
Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert.
How the archive is checked, and what it cannot prove.
This incident predates live tracking (October 17, 2026). It came from the vendor’s own published history, which is not covered by checkpoints.
Impact, status and times are the vendor’s own, as last archived. View on status.ngrok.com (opens in new tab).