A modern SSH client built entirely in Rust. Fast, encrypted, native. No Electron, no webview, no cloud servers. Just a single binary.
Powerful SSH workflows, beautiful interface, zero bloat.
Built with Iced and wgpu. Hardware-accelerated rendering, instant startup, minimal memory. No Electron, no webview.
Argon2id key derivation + ChaCha20-Poly1305 encryption. Per-field unique salts. Your secrets never leave your machine.
Integrated sidebar with Anthropic, OpenAI, or Gemini. Streams responses token-by-token and runs commands for you via an execute_command tool, gated by three independent auto-exec safety layers (deterministic floor, fail-safe LLM judge, chaining-guarded allow-list) so destructive commands never run unattended.
Direct, SOCKS4/5, HTTP CONNECT, ProxyCommand, multi-hop jump-host chaining. SOCKS5 RFC 1929 + HTTP Basic auth. Standalone port forwarding (Local / Remote / Dynamic SOCKS5) with per-row toggles and boot auto-start, reusable Proxy Identities, agent forwarding. RSA-SHA2, TOFU, smart auto-auth.
Sync your vault between devices over QUIC. LAN via mDNS, internet via self-hostable signaling + STUN, optional HTTP relay fallback. End-to-end encrypted, no central server. Ed25519-signed signaling with TOFU pubkey pin, per-source pairing cap, race-free Cloudflare Durable Object back-end.
Expose SSH hosts to AI assistants like Claude Code via the Model Context Protocol. List, inspect, and execute remotely. Distributed as a signed plugin — downloaded on demand, never bundled in installers.
Cloud providers and the MCP server run as separate signed binaries (Ed25519, verified before execution). JSON-RPC over stdio, on-demand download into ~/.oryxis/plugins/, sha256 integrity. New providers ship without touching the app.
Sidebar hides when a connection tab is open so the terminal fills the canvas; areas and connection tabs unify into one top bar with a burger menu. Customizable host icons (Circular / Square / Outline / Initials), dynamic accent on the chrome, contextual vault sub-nav. Classic mode stays a one-click opt-out.
Tray icon with Show / Hide / Quit, Active sessions submenu (jump to any open tab), Recent hosts submenu (top 10 by last_used). Opt-in close-to-tray and minimize-to-tray. Single-instance mutex with file-based primary/child IPC.
13 global themes (Oryxis, Termius, Darcula, Islands, Dracula, Monokai, Hacker Green, Nord, Solarized Dark / Light, Paper Light) plus custom terminal and UI schemes with a built-in graphical color picker (import iTerm / Windows Terminal / base16), 17 languages including Persian and Arabic with full RTL layout. Per-theme button colors, contrast tested in CI.
Full terminal output saved to the encrypted vault. Browse session history and review past commands anytime.
Dual-pane local/remote layout. Drag-and-drop uploads, multi-select transfers, edit-in-place, chmod properties, parallel channels (1–8), bulk queue with live byte-level progress, and server-to-server copy that streams host-to-host with no local round-trip.
Discover EC2 instances and ECS services from your AWS profile, access key, or SSO. One-click connect via SSH, EC2 Instance Connect, SSM Session, or ECS Exec into a live container. Plus a Kubernetes provider: kubeconfig auth, Deployment / StatefulSet / DaemonSet discovery into dynamic groups, and a pod shell via kubectl exec -it. Imports nest under a provider folder; workloads materialize as dynamic groups.
Split a tab into a tmux/iTerm-style grid, each pane its own session (saved host or local shell). Save an arrangement as a reusable session group with per-pane startup scripts. Pin tabs (restored on next launch, lazy reconnect) and drag to reorder, browser-style.
A UI designed for people who live in the terminal.
Cards grid with groups (manual and dynamic cloud-backed), distro auto-detection, inline quick connect.
Dual-pane SFTP. Drag-and-drop uploads, multi-select transfers, edit-in-place, parallel channels (1–8).
Streaming AI sidebar. Token-by-token responses, per-code-block Copy / Play, terminal context, bash tool execution.
Cloud Accounts (AWS). Dynamic ECS groups expand to live tasks; multi-container Lens, region badge, Copy CLI per row.
Keys and Identities side by side. Reusable credential bundles linked to many hosts; encrypted-key passphrase import.
13 terminal palettes with mini swatches. Oryxis Dark / Light, Termius, Darcula, Islands, Dracula, Monokai, Hacker Green, Nord, Solarized, Paper Light.
Settings → Interface. New Workspace layout mode (sidebar-less, top-tab unified), customizable host icons, dynamic accent on the chrome, layout direction.
Your credentials deserve better than plaintext config files.
The best of all worlds.
| Oryxis | Termius | PuTTY | Tabby | |
|---|---|---|---|---|
| Modern UI | ✓ | ✓ | ✗ | ✓ |
| Native (no Electron) | ✓ | ✗ | ✓ | ✗ |
| Open source | ✓ | ✗ | ✓ | ✓ |
| Encrypted vault | ✓ | ✓ | ✗ | ✗ |
| AI assistant | ✓ | ✗ | ✗ | ✗ |
| P2P sync (no cloud) | ✓ | ✗ | ✗ | ✗ |
| MCP integration | ✓ | ✗ | ✗ | ✗ |
| Cloud accounts (AWS EC2/ECS + Kubernetes) | ✓ | ✓ | ✗ | ✗ |
| Free forever | ✓ | ✗ | ✓ | ✓ |