Last updated: 14 June 2026
Every free way to host an internal dashboard, compared.
You built a dashboard and need a link only your company can open. These are the ten most common tools for secure hosting. We tested the access-control story on each. Here is what holds up.
What we tested for
Internal dashboards have one requirement most static hosting ignores: the link should only open for people at your company. A public URL is fine for a landing page. It is not fine for a dashboard showing revenue, pipeline, or headcount.
So the test is narrow. Can a non-technical person get a dashboard live? Can they restrict who opens it to their own company? And what is that restriction actually made of: a shared password, a secret link, a one-time email code, or a real company login?
The comparison
Cloudflare Pages + Access
The default answer almost everywhere, and it earns it. Pages hosts static files for free with unlimited bandwidth. Access puts an identity gate in front, free for up to 50 users and then $7 per user per month. You can connect it to Okta, Microsoft Entra, or Google Workspace, or fall back to one-time email codes.
The cost is setup. Access and Pages are two products you wire together in the Cloudflare dashboard. A developer will find that routine. A RevOps analyst will find it a side project. And the 50-user ceiling is a real number: the 51st viewer of your pipeline dashboard moves you onto the paid tier.
Best for: teams already living in Cloudflare with fewer than 50 viewers.
Netlify
Drag-and-drop and Git-based static hosting, with a genuinely good free tier for the hosting itself. The access story changed in late 2025, when Netlify moved to credit-based plans. Site-wide password protection, a single shared password, now starts on the Pro plan at $20 per month for unlimited members. The free tier has no built-in gate. Real identity-based access, connected to your company's identity provider with directory sync, sits on Enterprise plans at custom pricing.
Best for: developers who want Git-based deploys. Not designed for a non-technical person sharing an internal dashboard.
Vercel
Frontend hosting built around Next.js. On the free Hobby plan, deployment protection covers preview URLs but leaves your production domain public. To gate production you need the Pro plan, at $20 per deploying user per month with free viewer seats, plus the Advanced Deployment Protection add-on at $150 per month, or an Enterprise plan. Company-login gating is a Pro add-on rather than something built in. None of this is built for "drag an HTML file in and get a private link."
Best for: frontend teams shipping production apps. Heavy and underpowered for sharing a single dashboard.
GitHub Pages
Free, fast, and reliable for public content. It has no access gate. A GitHub Pages site is public even when the repository behind it is private. Private publishing exists, but only on GitHub Enterprise Cloud, and every viewer then needs a GitHub account with access to the repo. For a dashboard meant for finance or sales, that is the wrong door.
Best for: documentation, open source, and portfolios. Not internal dashboards.
Firebase Hosting
Free static hosting from Google with a generous tier and a global CDN. Firebase has its own authentication, but pointing it at a hosted static file and restricting that file to your company means writing code: auth rules, a Cloud Functions proxy, or custom middleware. There is no setting that says "only my company can open this."
Best for: developers building a full Firebase app. Not a drag-and-drop dashboard host.
Tiiny Host
Drag-and-drop hosting built for speed, and genuinely good at that. Password protection, a single shared password for the site, starts on the Solo plan at $13 per month. Higher tiers can also require a visitor to enter an email before the page loads. Plans run from $5 to $31 per month, with monthly visit caps from 10,000 on the entry tier up to 500,000 on Pro.
The access these methods give you is not company-level. A shared password can be forwarded by anyone who has it. The email step collects an address rather than checking it against an approved company directory. There is no connection to your identity provider, no domain-wide policy, and no audit trail. If the dashboard gets popular, the visit cap becomes the next thing to manage.
Best for: quickly sharing a prototype, PDF, or portfolio behind a password. Not meant for secure company-wide gating.
Static.app
In the same family as Tiiny Host: simple static hosting with a built-in code editor for quick HTML edits. Free for one site, with paid plans at $5, $10, and $15 per month, and unlike Tiiny they do not cap traffic. Access control is the same shared-password model. There is no identity-based gating.
Best for: developers who want a fast HTML editor and host. Same password limits as Tiiny.
Stacktree (stacktr.ee)
Built specifically for the HTML that AI agents produce, and the closest thing here to a Claude-native workflow. An agent calls a tool and gets back an unguessable link, then replaces the contents in place so the same URL stays current. Plans are free, $8 per month, and $19 per month. Every link is private by default, and you can add a shared password or restrict viewers to an email domain.
The model is the secret URL. Anyone who has the link can open it, and the email-domain option checks the domain rather than authenticating the person against your company's identity provider. There is no company-login integration. An unguessable URL controls distribution, not identity. Forward the link and it works.
Best for: developers who want agent-native publishing and are comfortable with a private link as the gate. If you require identity-based access, this is not a fit.
SharePoint
If your company runs Microsoft 365, SharePoint can host pages inside the intranet, and the access control is already there through Entra ID. The friction is publishing. Getting an interactive HTML dashboard into SharePoint is not a drag-and-drop. You work inside SharePoint's page framework, which limits interactivity, and you go through site creation, page building, and permissions. It works, and the result looks like an intranet page rather than your dashboard.
Best for: companies deep in Microsoft 365 that want hosting inside their existing tenant. Clunky for interactive dashboards.
Google Sites
A free, simple site builder inside Google Workspace, and you can restrict a site to your Workspace domain. The catch is that Google Sites builds pages; it does not serve files. You cannot upload your HTML dashboard and have it run. You would rebuild it inside Sites and lose the interactivity that made it a dashboard. Viewers also need a Google account to pass the domain restriction.
Best for: simple internal wiki-style pages. Not for hosting an interactive HTML dashboard.
Artifactive
Built for non-technical teams that make dashboards in Claude and need a link only their company can open. You publish by dragging the HTML file onto the web interface, or straight from Claude Desktop through the extension. Viewers sign in with the company login they already use, so access runs through your organization's own identity provider rather than a password or a secret link. Viewers are free and unlimited on every plan. To update a dashboard, you re-publish to the same link.
The trade-offs are real. It costs more than the free tools (starting at $128/month) but is cheaper that Enterprise hosting plans on Netlify or Vercel with SSO/SAML. If your dashboard has 20 viewers and no security review to clear, the simpler tools above will do the job.
Best for: non-technical analysts working in Claude who need company-gated sharing without an engineer, especially past 50 viewers or when your company requires identity-based access.
Summary table
| Tool | Drag-and-drop | Company gate | Gate type | Free viewers | Publish from Claude |
|---|---|---|---|---|---|
| Cloudflare Pages + Access | No (dashboard setup) | Yes | Identity provider or email code | Under 50 free, then $7/user | No |
| Netlify | Yes | Paid plans only | Password (Pro), identity (Enterprise) | Unlimited; no gate on free | No |
| Vercel | No (Git-based) | Paid plans only | Password/identity (Pro add-on) | Unlimited; no gate on free | No |
| GitHub Pages | No (Git-based) | No | None (public) | N/A | No |
| Firebase Hosting | No (CLI) | Custom code only | Custom code | N/A | No |
| Tiiny Host | Yes | No (password/email capture) | Shared password or email capture | 10k–500k/mo cap | No |
| Static.app | Yes | No (password only) | Shared password | Unlimited traffic | No |
| Stacktree | MCP | Partial (email domain) | Secret URL + email domain | Plan-based | Yes (MCP) |
| SharePoint | No (page builder) | Yes | Entra ID | Included with M365 | No |
| Google Sites | No (page builder) | Yes | Workspace domain | Included with Workspace | No |
| Artifactive | Yes | Yes | Company login (your identity provider) | Unlimited, free | Yes |
Deeper comparisons: Cloudflare Access · Netlify · Vercel · Tiiny Host · Stacktree · Claude Native Sharing
The pattern
A clear split runs through the list. The free hosts either have no gate (GitHub Pages, Firebase) or make you build one with code or developer setup (Cloudflare). The simple drag-and-drop tools gate with a shared password or an email step (Tiiny Host, Static.app), which controls distribution but not identity. The agent-native option (Stacktree) uses a private link. The Microsoft and Google tools gate to your organization properly but are not built to serve an interactive HTML dashboard.
What none of the free options put together is company-login gating, drag-and-drop publishing, unlimited viewers, and a path straight from Claude. That combination is where Artifactive is placed, and what you pay for.
Common questions
Is Cloudflare's free tier enough for me?
Often, yes. If fewer than 50 people need access and you have someone comfortable in the Cloudflare dashboard, Pages plus Access gates a dashboard to your company at no cost. The reasons to look elsewhere are specific: more than 50 viewers, no one to do the setup, or a need to publish straight from Claude without touching a dashboard.
Which of these connect to Okta, Entra, or Google Workspace?
Cloudflare Access once it is set up, Netlify and Vercel on their paid identity tiers, SharePoint through Entra, and Artifactive out of the box. Stacktree checks an email domain but does not connect to an identity provider. Tiiny Host and Static.app do not offer it. How identity-provider gating actually works is covered in the security overview.
What happens if someone outside my company opens the link?
It depends on the gate. With a public host (GitHub Pages, or Firebase without custom code) they see everything. With a shared password (Tiiny Host, Static.app, Netlify Pro) they get in if they have the password. With a secret link (Stacktree) they get in if they have the link. With company-login gating (Cloudflare Access, SharePoint, Artifactive) they hit a login screen and cannot pass it without a company account.
Can I publish to any of these straight from Claude?
Two can. Stacktree publishes through MCP, and Artifactive publishes from Claude Desktop through its extension, or by dragging the HTML file in. The rest need a manual upload, a Git push, or a CLI deploy.
What is the cheapest way to gate a dashboard to my whole company?
For under 50 viewers with a willing developer, Cloudflare Pages plus Access is free. Above 50 viewers the math changes: Cloudflare runs $7 per user per month, while company-login tools with unlimited free viewers stop charging by headcount. The cheapest option depends mostly on how many people will open the dashboard.
Do the free tiers really stay free?
Mostly, with limits worth reading. GitHub Pages and Firebase are free but have no company gate. Cloudflare Pages is free with unlimited bandwidth, while Access is free only to 50 users. Tiiny Host and Static.app charge for their gates, and Tiiny adds monthly visit caps from 10,000 to 500,000. Netlify and Vercel are free to host but charge for any real gate.
Why isn't a password or a secret link enough?
For some dashboards it is. A password or an unguessable link controls who you hand access to. It does not verify who is actually opening the page, and it cannot be revoked for one person without changing it for everyone. Once it is forwarded, it works for whoever received it. Company-login gating ties access to each person's company account instead, which is the posture for internal company data.
Publish your first dashboard
If your dashboard needs a company-only link and you would rather not configure a separate gate or pay by the viewer, that is what Artifactive is built for.