Every feature, and the plan that has it
Own domains, routing, deep links, analytics that count people, QR codes, an API and teams. Each section says what it does, as the code runs it, and which plan includes it.
Your own domain
Add a domain such as go.northwind.com and prove it is yours with one DNS record. Once it is verified and points at Brevily, every link on it carries your name.
- A TXT record proves the domain is yours; two address records (A and AAAA) point it at Brevily and carry its visitors
- A root domain (northwind.com rather than go.northwind.com) works the same way, at any DNS provider: the records are plain addresses, so nothing needs ALIAS or CNAME flattening
- Generated back-halves start at 3 characters on your own domain
- Case never matters: PayPal and paypal are one link, so neither can be taken from the other
- After a downgrade, you choose which domains stay
These, once:
| Type | Name | Value |
|---|---|---|
| A | go.northwind.com | 34.160.248.211 |
| AAAA | go.northwind.com | 2600:1901:0:f20f:: |
| TXT | _brevily-verify.go.northwind.com | 9f1c7a2e4b8d03c6 |
The addresses are Brevily’s and the same for every domain; the TXT value is the domain’s own, shown in the console. The TXT value here is an example.
Links that do what you say
Choose the back-half or take a generated one, tag it, give it an end date or a click limit, and add UTM tags. A link’s domain and back-half never change after it is made; its destination can.
- Expiry by date or by clicks; an expired link says so, or goes where your own domain sends expired links
- UTM tags added for you; a visitor’s own utm_* keys are passed on
- Password-protected links on Starter, Pro and Business, at no charge per link
- Your own title, description and image when the link is shared, on Starter, Pro and Business
- Expires
- 31 Dec 2026
- Click limit
- None
- UTM
- newsletter · email · q3
- Password
- On
Every setting of a link sits on its own page in the console.
One link, several destinations
Send visitors to the right place by country, region, device, or day and hour, split them by weight for a test, or switch the destination at a set time. Every destination is checked like the link’s own.
- Targeting rules by device, country and region, in the order you set; on chosen days and hours in your time zone (Pro and Business)
- A/B variants by weight, the same one each time for a returning visitor: for everyone, or within one rule, so a test can run per region or per evening
- Scheduled destinations, changed within five minutes of the time (Pro and Business)
- Deep links into your own app: Android opens it, iOS offers the choice
- Meta, Google Ads, LinkedIn and X pixels, only where you add them (Pro and Business)
- Cloaked links on your own domain: the address bar keeps the short link while the destination shows in a frame, with the preview, the checks and a Brevily strip kept (Pro and Business)
| When | Send to |
|---|---|
| A phone | northwind.com/ |
| A tablet | northwind.com/ |
| Anyone in India | northwind.com/ |
| Everyone else | northwind.com/ |
Rules are read top to bottom; the first that matches wins. Example rules.
Numbers you can use
Every link has its own page: clicks over time, unique visitors, country, device, browser, operating system and referrer. Known crawlers are counted apart, so the numbers are people.
- Daily totals kept 30 days on Free, 180 days on Starter, 1 year on Pro, 2 years on Business
- Each click kept in detail for 90 days on Starter, 180 days on Pro, 1 year on Business
- Clicks by region and city (Starter, Pro and Business), and by hour of the day and day of the week in your time zone (Pro and Business)
- CSV export, a public stats page for a link if you want one, and reports emailed on a schedule (Starter, Pro and Business)
- Conversions: report a sale against the click that brought it (Starter, Pro and Business)
Example data.
Ready for print
Every link has a QR code in PNG and SVG. It encodes the short link, not the destination, so a printed code stays right after you change where it goes.
- Plain codes on every plan
- Styled codes with your colours, shape and logo, checked for contrast: any link, styled (Starter, Pro and Business)
- Scans counted as their own source
Points at the short link, so the destination can change after this is printed.
Built to be scripted
The console’s own routes, under /api, in JSON. Send an API key’s two headers, or sign each request with the key instead of sending its secret: a signed request works once, so a captured one cannot be sent again.
- Organisation keys that never hold more than their maker, or personal keys; each expires after 30 to 365 days, or never
- 10 requests a minute on Free, 30 on Starter, 120 on Pro, 300 on Business, and 500 a day on Free, 2,000 on Starter, 10,000 on Pro, 30,000 on Business, counted for the organisation's keys together; conversion reports count apart
- Bulk import: paste a CSV of up to 200 rows; the column names popular shorteners export work too (Pro and Business)
- Webhooks: each human click sent to your endpoint, signed with X-Brevily-Signature, and retried for about seven hours (Pro and Business)
- Google Analytics 4 forwarding: each human click sent to your GA4 property (Pro and Business)
curl -X POST https://console-uat.brevily.com/api/links \
-H "x-api-key: $BREVILY_KEY" \
-H "x-api-secret: $BREVILY_SECRET" \
-H "content-type: application/json" \
-d '{"url":"https://northwind.com/q3",
"domain":"go.northwind.com"}'
201 { "id": "01K6…", "domain": "go.northwind.com",
"slug": "xk3", "shortUrl": "https://go.northwind.com/xk3" }
No slug, so one is generated: 3 characters on this domain. What the API does
Access that matches the team
People are invited, never handed a shared password. What they can do comes from their groups: Admin, Billing, or a group you make with exactly the permissions it needs.
- Permissions per area: links, domains, people, billing and more
- Two-factor codes, passkeys, and sign-in with Google, GitHub or Microsoft
- Single sign-on through your own identity provider (Business)
- An audit log of who changed what, exportable as CSV (Business)
Nobody can give a permission they do not hold themselves.
Also in the box
Destinations are checked
Every destination is checked with Google Web Risk and Brevily’s own heuristics, when a link is made and again on a schedule. A flagged destination stops every link that points there. And anyone can look before they click: a + at the end, as in go.surl.mx/q3-launch+, opens a page naming the destination instead of going there. How Brevily is run
Your data leaves with you
Export every link, deleted ones included, and its daily analytics as CSV at any time. Deleting an organisation waits 30 days, and the owner can change their mind until then.
Allowances, then a grace and top-ups
Past a monthly allowance, a paid plan lets 10% more through, never charged, and past that grace a new use waits for a top-up or the reset (Free has no grace). A top-up raises one allowance for the months you choose, paid once; there is never an overage invoice. Add-ons on the pricing page
Short domains of its own
Without a domain of your own, links live on go.surl.mx. Generated codes there are 5 characters, random-looking, in lowercase letters and digits only, free of look-alikes such as 0 and o or 1 and l, so they read aloud and type on a phone without a shift key.
See what each plan includes
Brevily is invite-only for now. Say what you would use it for and a person replies.