Stop SSH'ing Into Every Pi

See which Pis are online, run commands across all of them, and fix stuff from your browser. No VPN, no port forwarding, no static IPs.

Join the Beta
30s
Setup time
0
Inbound ports needed

Your Network Shouldn't Be the Weak Link

I built PiPortal because I got tired of seeing people punch holes in their networks just to reach a Pi. Open ports, shared passwords, unencrypted tunnels — it's how most people do it, and it's exactly what attackers look for.

PiPortal does it differently: your Pis only make outbound connections. Zero open ports, everything encrypted, every device gets its own token. Whether you have three Pis or thirty, you shouldn't have to choose between convenience and security.

Built by a security professional, for people who just want their Pis to work.

Secure by Default

No open ports on your network. No passwords on disk. No unencrypted traffic. Ever.

🔒

End-to-End Encrypted

All device connections use encrypted WebSockets over TLS. Traffic between your browser and your Pi is never exposed in plain text.

🛡

No Inbound Ports

Your Pi only makes outbound connections to the PiPortal server. No listening ports, no firewall holes, no attack surface.

Tunnels Off by Default

Tunnel forwarding is disabled until you explicitly enable it from the dashboard. Your local services are unreachable until you say so.

🔑

Token-Based Auth

Devices authenticate with unique tokens. No passwords stored on disk. Revoke access instantly from the dashboard if a device is compromised.

🔐

HTTPS Everywhere

Every tunnel gets its own HTTPS subdomain with a valid TLS certificate. Your traffic is encrypted end to end, automatically.

Fix Stuff From Your Browser

No more opening SSH sessions one at a time. No more wondering which Pi is offline.

💻

Terminal in Your Browser

Click a device, get a shell. No SSH keys to manage, no VPN to connect to. Works through any NAT or firewall.

Full interactive terminal, right in the dashboard

📈

See What's Actually Happening

CPU temp, memory, disk space, and uptime for every Pi — live. Know when something's wrong before it's broken.

Updates every few seconds, no page refresh needed

🔌

Share a Link, Not a Port

Expose any local service via an HTTPS subdomain. Share a web app, API, or dashboard with a link. No port forwarding.

e.g. mypi.piportal.dev routes to localhost:8080 on your device

🔄

Run Commands Across All Devices

Tag your Pis into groups and run a command on all of them at once. Update packages, restart services, or check logs — in one click.

Dry-run mode to preview what'll happen first

People Use PiPortal For

Basically anything where you have a Pi somewhere and wish you could just reach it.

Home Lab & Self-Hosting

Access Home Assistant, Pi-hole, or Nextcloud from anywhere. No dynamic DNS, no port forwarding, just a link.

  • Check on things from your phone
  • Share a dashboard with family
  • Reboot from the couch

Pis in Other Locations

Got Pis at a workshop, office, friend's house, or a client site? Monitor and manage them without being on the same network.

  • See if they're still running
  • Push updates remotely
  • Fix problems without driving there

Dev & Prototyping

Share what's running on your Pi with teammates or clients using a real HTTPS URL. Great for demos and testing webhooks.

  • Show a work-in-progress to anyone
  • Test webhooks from Stripe, GitHub, etc.
  • Debug from another machine

Up and Running in Minutes

Three commands. No dependencies, no Docker, no config files.

1

Install

One command to install the PiPortal agent on your Pi.

curl -fsSL https://piportal.dev/install.sh | bash
2

Connect

Start the agent and point it at the port you want to expose.

piportal setup piportal start --port 8080
3

Manage

Open your dashboard to monitor, control, and tunnel into your devices.

https://piportal.dev/dashboard

Simple, Per-Device Pricing

Start free with one device. Add more for a flat per-device rate with no surprises.

Pro

$2.50 / device / mo
coming soon
  • Unlimited devices
  • 100 GB tunnel traffic / month
  • Live monitoring
  • Remote reboot
  • Priority support
Coming Soon

Frequently Asked Questions

What devices does PiPortal support?

PiPortal works on any Raspberry Pi running a 32-bit or 64-bit Linux OS (Raspberry Pi OS, Ubuntu, DietPi, etc.). It also works on other ARM or x86 Linux single-board computers.

Do I need to open ports on my router?

No. The PiPortal agent makes outbound-only connections to the server. You never need to configure port forwarding, dynamic DNS, or firewall rules.

Is my traffic secure?

Yes. All connections are encrypted with TLS. Tunnel traffic is carried over secure WebSockets, and every tunnel subdomain gets a valid HTTPS certificate automatically.

What happens if my Pi goes offline?

The dashboard shows real-time connection status. When your Pi reconnects, the agent automatically re-establishes its connection to the server. No manual intervention needed.

Can I use PiPortal for production stuff?

Absolutely. It's great for internal tools, home labs, and small deployments. The Pro plan gives you unlimited devices with 100 GB of tunnel traffic each.

How is the free plan limited?

The free plan includes one device with 1 GB of tunnel traffic per month. Monitoring, remote terminal, and remote reboot are fully included. To add more devices, upgrade to Pro at $2.50/device/month.

Done SSH'ing into Pis one at a time?

PiPortal is in beta. Join the Discord to get access and tell us what's annoying you.

Join the Beta on Discord