One LAN, everywhere.
Reach the services on your home lab, office, or colo securely over HTTPS — no port-forwarding, no static IP, no VPN client to babysit.
Encrypted by default
Every service gets a real Let's Encrypt certificate — no cleartext, ever.
Zero inbound firewall
An outbound reverse tunnel means nothing to open on your router.
Your own subdomains
Map friendly hostnames to any port on any machine you control.