# Research and Open Data on Localhost Exposure

> Open datasets on sharing apps from a laptop: localhost tunnels compared, exploited dev tools, tunnel abuse reports, and a tested qURL CLI run.

Source: https://layerv.ai/research/

---

Research

# Open data on sharing apps from a laptop.

Every dataset here is free to reuse under CC BY 4.0, cites its sources, and says how to rebuild it. We publish counts, never anyone’s hostnames.

[The Localhost Exposure Report 2026 Exploited dev and AI tools, tunnel abuse on record, tunnel hostnames in public certificate logs, and free-tier changes: the risks of sharing apps from a laptop. Updated October 1, 2026.](https://layerv.ai/research/localhost-exposure-2026/) [Developer and AI tools in CISA KEV 38 known-exploited vulnerabilities in tools developers run locally; 11 for AI and ML tools were added in 2026, against 1 in 2025. Updated October 1, 2026.](https://layerv.ai/research/dev-tool-kev/) [Localhost tunnel abuse ledger 11 published reports, from 2021 to 2026, of criminals using ngrok and Cloudflare tunnels for malware delivery, phishing, and ransomware. Updated October 1, 2026.](https://layerv.ai/research/tunnel-abuse-ledger/) [How the qURL™ CLI behaves, tested qURL CLI tests on October 1 and 18, 2026: streaming, session admission, Vite and Next.js. The follow-up used an existing resource. Updated October 18, 2026.](https://layerv.ai/research/qurl-behaviour/) [Localhost sharing tools compared How qURL and 22 localhost tunnel tools handle accounts, URLs, public reachability, access control, link expiry, single-use links, protocols, and free-tier limits. Every cell cites the vendor document or test it came from. Updated October 14, 2026.](https://layerv.ai/compare/localhost-tunnels/)



---

*This markdown version is auto-generated from [https://layerv.ai/research/](https://layerv.ai/research/) for AI agents. Curated agent resources: [llms.txt](https://layerv.ai/llms.txt). For the full interactive experience, visit the HTML version.*