Links, made brief.
Short links on your own domain, deep links that open your app, and the numbers that follow every click.
https://acme.com/campaigns/2026/q3-launch/landing?utm_source=newsletter&utm_medium=email&utm_campaign=q3
104 characters down to 17. Same destination, and you can point it somewhere else later without reprinting anything.
25 links a month free, no card. Your own domain from $29.99.
What you get
Your own domain
One CNAME and one TXT record. We issue the certificate and renew it, usually within the hour, and we do not hold your domain hostage: point it elsewhere and the DNS is yours the same day.
Targeting on one link
One short link, several destinations, resolved by device and country at the edge. Useful when the iOS page, the Android page and the desktop page are three different URLs but one printed QR code.
A/B rotation that stays put
Split traffic by weight across destinations. The choice is sticky per visitor, so someone who comes back twice sees the same variant and your numbers mean something.
Click analytics without a banner
Clicks over time, unique visitors, country, device, browser and referrer, per link. Known crawlers are marked at ingest rather than dropped, so counts exclude bots without hiding them. No cross-site cookie and no visitor profile.
QR codes that survive a reprint
PNG, SVG and PDF on every link. The code encodes the short link, never the destination, so ten thousand printed flyers stay correct after you repoint them.
Expiry by date or by clicks
Schedule a link to go live, to stop, or to switch destination on a date. Or cap it at N clicks. An expired link explains itself instead of 404ing.
Webhooks and the API
One REST call to create a link, or a CSV import that keeps your existing back-halves. Click events POST to your own endpoint, signed, with retries. Keys are scoped to a group and to the operations you allow.
Groups, not a free-for-all
Groups own links, domains and keys. A guest gets exactly one group, which is how an agency works on your domain without seeing the rest of your account.
A short link should not hide where it goes
Shorteners are the classic phishing vector. That is a reason to be careful about how one is run, not a reason to pretend the problem is elsewhere.
Anyone can look before they click
Add a + to any Brevily link and it shows you the destination, the time it was created and whether it has been reported, instead of following it. It works for everyone, signed in or not, and it cannot be turned off by whoever made the link.
Destinations are checked
Every destination is resolved and checked against three phishing and malware blocklists when the link is created, and again on a schedule afterwards. A destination that starts failing or gets listed raises a flag on the link, and its owner gets an email.
Reports get a deadline
Phishing and malware reports carry a four-hour review target; everything else twenty-four hours. Reporting takes one form and no account. Confirmed phishing is submitted onward to the blocklists we contribute to.
A disabled link says so
A link we have disabled shows a page explaining that it was disabled and how to appeal, to both the visitor and the owner. It does not silently break, and the back-half is not handed to someone else.
One link, the right screen
A campaign link has to work for the person who already has your app and the person who has never heard of it. A deep link tries the app first, and falls back the way you tell it to: the store listing, then the web page.
On iOS that means Universal Links, on Android App Links — verified against each of your domains, so the app opens directly instead of bouncing through a page that asks permission. Where verification is not possible, the interstitial tries the scheme and moves on after a timeout rather than leaving someone on a blank screen.
Each path is counted separately. That is the number worth having: it tells you how many people opened the app, how many went to the store, and how many just read the page — and usually that the third group is larger than anyone guessed.
Why sign-up is closedPOST https://api.surl.sh/v1/links
{
"url": "https://acme.com/summer",
"app": "acme://offers/summer",
"fallback": "https://apps.apple.com/app/id4829",
"domain": "go.acme.com"
}
Pay for features, not for clicks
Redirects are unlimited on every plan, including free. We bill for links, domains, history and seats, because those are the parts that cost us money.
| Free$0forever | Pro$29.99per month | Business$69.99per month | |
|---|---|---|---|
| Links a month | 25 | 5,000 | 50,000 |
| Redirects | Unlimited | Unlimited | Unlimited |
| Clicks recorded in detail, a month | 10,000 | 1,000,000 | 10,000,000 |
| Per-click history kept | 30 days | 1 year | 2 years |
| Daily totals kept | 1 year | Unlimited | Unlimited |
| Your own domains | — | 5 | 100 |
| Seats | 1 | 3 | 100 |
| Credits a month, for extra links | — | 500 ($5) | 2,500 ($25) |
| Discount on credit packs | — | — | 20% |
| Webhooks and integrations | — | — | Included |
| Single sign-on | — | — | Included |
| Audit log | — | — | Included |
| Trial | — | 14 days, no card | 14 days, no card |
| Start free | Start | Start |
Every plan is monthly, and you can leave at any time. Prices exclude GST. Sign-up opens after the internal beta .
The ones we get asked
Pricing, limits, and the awkward ones about data.
It falls back in the order you set: app scheme, then the store listing, then a web URL. The interstitial is skipped when we can tell the app is present, and every path is counted separately.
Yes. Pro includes five domains and Business a hundred; Free is on our own short domains. Point a CNAME at edge.surl.sh and the certificate is issued and renewed for you.
Import a CSV of slugs and destinations and keep the same back-halves. Once your domain points here, existing links resolve unchanged.
Around 30 ms at the edge for a cached link, from regions in Europe, North America and Asia. A link is cached the moment you create it, so the first visitor is not the slow one.
No. Links on a Brevily domain keep redirecting, and links on your own domain keep working for 30 days after the plan ends, which is time to move the DNS. You can export every link, with its clicks, as CSV at any point.
One short link created in a calendar month. Clicks are never metered, so a link that goes viral costs you nothing extra. Deleting and recreating the same link twice counts twice.
Neither. We resolve a destination when the link is created, and again on a schedule, to check that it works and is not on a blocklist; we warn you when it starts failing. Clicks are counted with no cross-site cookie and no visitor profile: country, device, browser and referrer.
Your first link is free
25 links a month, free, with no card. Add a domain when you are ready. Sign-up opens after the internal beta.