Research
Open data on sharing apps from a laptop.
Every dataset here is free to reuse under CC BY 4.0, cites its sources, and says how to rebuild it. We publish counts, never anyone’s hostnames.
The Localhost Exposure Report 2026
Exploited dev and AI tools, tunnel abuse on record, tunnel hostnames in public certificate logs, and free-tier changes: the risks of sharing apps from a laptop. Updated October 1, 2026.
Developer and AI tools in CISA KEV
38 known-exploited vulnerabilities in tools developers run locally; 11 for AI and ML tools were added in 2026, against 1 in 2025. Updated October 1, 2026.
Localhost tunnel abuse ledger
11 published reports, from 2021 to 2026, of criminals using ngrok and Cloudflare tunnels for malware delivery, phishing, and ransomware. Updated October 1, 2026.
How the qURL™ CLI behaves, tested
qURL CLI tests on October 1 and 18, 2026: streaming, session admission, Vite and Next.js. The follow-up used an existing resource. Updated October 18, 2026.
Localhost sharing tools compared
How qURL and 22 localhost tunnel tools handle accounts, URLs, public reachability, access control, link expiry, single-use links, protocols, and free-tier limits. Every cell cites the vendor document or test it came from. Updated October 14, 2026.