You could use something like Cloudflare Access to secure it, while it's on the Internet. There's no reason you need to build the security just because you build the tool.