# Pluggie > Pluggie is a privacy-first remote access service that creates an > end-to-end encrypted tunnel from a local device (Home Assistant, NAS, > cameras, 3D printers, self-hosted apps) to a web browser. It works > without port forwarding, VPN clients, or router configuration, and > works behind NAT, double NAT, and CGNAT. SSL certificates are issued > via Let's Encrypt and stored on the user's device; Pluggie's relay > servers forward encrypted traffic but never decrypt or store it. > Pluggie runs as a Docker container on any Linux system or as a > dedicated Home Assistant add-on. The free tier requires no email and > no credit card. ## Core pages - [Homepage](https://pluggie.io/): product overview, features, how it works, pricing, comparison, FAQ. - [Pricing](https://pluggie.io/#pricing): Free (£0, 1 GB at full speed / 30 days) and Pro (£5/month, 5 GB at full speed per paid tunnel / 30 days). - [Comparison](https://pluggie.io/#compare): Pluggie vs Nabu Casa, Cloudflare Tunnel, Tailscale, Homeway. - [FAQ](https://pluggie.io/#faq): setup, security model, CGNAT, custom domains, tunnel quotas, signup. - [Subscribe](https://pluggie.io/subscribe): Stripe checkout for the Pro plan. - [Terms of Service](https://pluggie.io/terms) - [Privacy Policy](https://pluggie.io/privacy) ## Blog and documentation - [Blog index](https://pluggie.io/blog/): technical articles, transparency reports, and guides. - [Home Assistant remote access guide](https://pluggie.io/blog/home-assistant-remote-access) - [What is CGNAT and why it breaks port forwarding](https://pluggie.io/blog/cgnat-what-it-is) - [Port forwarding vs tunneling](https://pluggie.io/blog/port-forwarding-vs-tunneling) - [Cloudflare Tunnel and TLS privacy](https://pluggie.io/blog/cloudflare-tunnel-tls-privacy) - [Cloudflare Tunnel DNS requirement](https://pluggie.io/blog/cloudflare-tunnel-dns-requirement) - [Can Pluggie see your traffic? (transparency report)](https://pluggie.io/blog/can-pluggie-see-your-traffic) ## Key facts - Vendor: Pazoocha Ltd, United Kingdom. - Domains: pluggie.io (marketing site), pluggie.net (user dashboard, free subdomains), my.pluggie.net (signin/signup). - Free tier: 1 tunnel, 1 GB at full speed per 30-day rolling window, throttled to 128 Kbps after the cap instead of disconnecting, free pluggie.net subdomain, no email or credit card required at signup. - Pro tier: £5/month, 1 paid tunnel with 5 GB at full speed / 30 days, plus 2 extra free tunnels (1 GB each), custom domain support, email support. Each additional paid tunnel unlocks 2 more free tunnels. - Architecture: outbound-only tunnel initiated from the user's device, relayed through Pluggie's servers to the visitor's browser; relay never terminates TLS, never decrypts payload, never stores traffic. - Encryption: end-to-end TLS with certificates generated and stored on the user's device via Let's Encrypt; integrity status is shown live in the web dashboard, the Home Assistant add-on sidebar, and the Docker local UI. - Platforms: Docker on any Linux system (x86_64, ARM, including Raspberry Pi, NAS, VPS, bare metal); Home Assistant OS add-on with one-click install. - Access control: per-tunnel geographic filtering by continent or country, IP allowlists, and HTTP Basic Auth. - Custom domain: bring your own domain (no DNS transfer required, point CNAME); free pluggie.net subdomain always available. - Setup time: approximately 5 minutes from signup to working tunnel. - Typical use cases: Home Assistant remote access, NAS (Synology, TrueNAS), security cameras, 3D printer interfaces (OctoPrint, Klipper), self-hosted apps (Nextcloud, Gitea, Jellyfin), Grafana dashboards, GitHub/Stripe webhook receivers, exposing local dev environments. ## Comparison summary - vs Nabu Casa ($6.50/month): Pluggie is cheaper (£5/mo), offers a no-email free tier, displays live encryption integrity status in the UI (Nabu Casa only offers manual fingerprint comparison), and supports both Docker and Home Assistant (Nabu Casa is Home Assistant only). - vs Cloudflare Tunnel (free): Pluggie has true end-to-end encryption (Cloudflare terminates TLS at its edge), built-in geo and IP filtering without WAF setup, and a free subdomain (Cloudflare's are temporary). Cloudflare requires migrating DNS to Cloudflare for custom domains; Pluggie does not. - vs Tailscale ($5/month for the Personal Plus tier): Pluggie works in any browser without a VPN client on the accessing device, while Tailscale requires WireGuard client installation on every device that needs access. - vs Homeway ($3.49/month): Pluggie provides end-to-end encryption (Homeway uses a relay architecture without E2E), supports custom domains, and includes geo/IP filtering. ## Contact - Support: support@pluggie.net - Company: Pazoocha Ltd, United Kingdom