OrbitDownload

Real HTTPS domains
for your localhost.

Orbit gives every dev server a trusted address like https://app.local. No config files, no root daemon, no certificate warnings.

Download for macOS See how it works

Apple silicon · macOS 15.6 or later · 3.5 MB

Browserhttps://storefront.local🔒 trusted certificate
Orbit · :443terminates TLS, matches Host, rewrites headers
Your dev serverhttp://localhost:3000unchanged, unaware

Features

Everything production HTTPS gives you. On your laptop.

Secure cookies, service workers, OAuth redirects, clipboard and camera APIs: the things that quietly break on http://localhost just work.

Certificates your browser trusts

A bundled mkcert creates a local certificate authority and adds it to your login keychain once. Every domain is covered, and the certificate is reissued automatically when your domains change.

.local names, zero setup

Domains ending in .local are announced to your Mac over mDNS. Type portfolio and Orbit serves portfolio.local, with no hosts file and no DNS server.

Or bring any domain

Want app.example.com? Orbit keeps a clearly marked block in /etc/hosts and updates it for you with a single admin prompt.

No root daemon

The proxy runs inside the app on port 443. macOS lets regular processes bind it, so there's no privileged helper running in the background.

Made for dev servers

The Host header is rewritten to localhost with X-Forwarded-Host and -Proto added, so Vite, webpack and friends accept requests without allowlist changes.

Streams and WebSockets

Responses stream through as they're produced, so server-sent events work and WebSocket upgrades (hot reload included) are tunneled untouched.

How it works

Three steps. About ten seconds.

  1. 1

    Add a project

    Group related servers together: a storefront, its API, the docs site.

  2. 2

    Map a domain to a port

    Type a name and the port your dev server is listening on. That's the whole config.

  3. 3

    Open it over HTTPS

    Click the link. Green padlock, real origin, cookies and service workers behave like production.

Try it: this is exactly how Orbit reads a proxy

https://storefront.local→http://localhost:3000

Resolves instantly over mDNS. Nothing else to set up.

FAQ

Good questions.

A Mac with Apple silicon running macOS 15.6 or later. The download is about 3.5 MB.

Orbit adds its local certificate authority to your login keychain and marks it as trusted for your user. macOS asks you to confirm with your password or Touch ID. If you dismiss it, click Trust Certificate… in the sidebar to try again.

Open Orbit once, then go to System Settings › Privacy & Security and click Open Anyway. You only need to do this the first time.

Projects live in ~/.localcan/projects.bin, and the local CA and issued certificate live under ~/.localcan as well. Nothing leaves your machine.

.local records point to 127.0.0.1, and /etc/hosts entries do too, so the domains only resolve on your own Mac.

Put your localhost in orbit.

A 3.5 MB download for Apple silicon Macs.

Download Orbit 0.1