As an aside, the tunnel scenario is currently something that has been solved by a few other startups including:
* Browserling - http://www.catonmat.net/blog/announcing-ssh-tunnels-for-browserling/
* BrowserStack - http://www.browserstack.com
http://www.catonmat.net/blog/announcing-ssh-tunnels-for-brow...
IMO if you're going to be publishing some form of cloud SaaS for testing, this feature is a must.
I personally don't like my broken code leaving the confines of the office (or opening up any outside ports).