NATIVE SSH CLIENT · WRITTEN IN RUST

SSH, engineered.

A fast, encrypted, native SSH client. An AI that runs your commands, a vault that never leaves your machine, P2P sync, cloud and Kubernetes — all in a single binary. No Electron. No webview. No telemetry.

0%
Rust
0
Telemetry
0
Platforms
0
Languages
Oryxis hosts dashboard with grouped cards and quick search
ENGINEERED WITH

01CAPABILITIES

Everything you need.
Nothing you don't.

AI

An assistant that actually does the work

Chat in a sidebar next to your live session. It doesn't just narrate — it runs commands for you through a real execute_command tool, streaming token by token.

Anthropic · OpenAI · Gemini — gated by 3 independent auto-exec safety layers (deterministic floor, fail-safe LLM judge, chaining-guarded allow-list).

Native, GPU-rendered

Built on Iced + wgpu. Instant startup, tiny memory footprint. No Electron, no webview, no Chromium tax.

A vault, not a config file

Argon2id + ChaCha20-Poly1305, every secret encrypted per-field with its own salt. Your credentials never leave the machine.

The whole SSH pipeline

Multi-hop jump chaining, SOCKS4/5 + HTTP CONNECT proxies, ProxyCommand, agent forwarding, and standalone port forwarding (-L / -R / -D).

Sync without a server

Your vault across devices over QUIC. LAN via mDNS, internet via STUN with an optional self-hosted relay. End-to-end encrypted, no central account.

Cloud and Kubernetes, one click

Discover EC2 instances and ECS services from your AWS profile, access key, or SSO — then connect over SSH, EC2 Instance Connect, SSM, or exec into a live container. Plus a Kubernetes provider: kubeconfig auth and a pod shell via kubectl exec.

MCP

Wired into your AI tooling

Expose your SSH hosts to Claude Code, Cursor and other clients over the Model Context Protocol. List, inspect and execute remotely. Shipped as a signed plugin, downloaded on demand — never bundled.

AND THE DETAILS THAT MATTER

02INTERFACE

A UI for people who
live in the terminal.

Hosts dashboard with cards, groups and quick search
Cards grid with manual and dynamic cloud-backed groups, distro auto-detection, inline quick connect.

03SECURITY

Security is not
an afterthought.

Your credentials deserve better than plaintext config files. Every secret is encrypted before it ever touches disk.

  • Argon2id + ChaCha20-Poly1305Memory-hard KDF + AEAD encryption for every stored secret.
  • Per-field encryptionUnique 32-byte salt + 12-byte nonce for each credential.
  • Zero telemetryNo data leaves your machine. Ever. Verify it yourself — it's open source.
  • Pure Rust cryptographyNo C dependencies in the crypto path. Memory safe by design.
  • TOFU host key verificationFingerprints checked on every connection, alert on changes.

04COMPARISON

Why Oryxis?

Feature Oryxis Termius PuTTY Tabby
Modern UI
Native (no Electron)
Open source
Encrypted vault
AI that runs commands
P2P sync (no cloud)
MCP integration
Cloud (AWS EC2/ECS + Kubernetes)
Free forever

05INSTALL

Get Oryxis.

One binary. All platforms. No account required.

Windows winget install WilsonGlasser.Oryxis
Arch (AUR) yay -S oryxis-bin

or grab a build directly

Or build it yourself: git clone https://github.com/wilsonglasser/oryxis.git && cd oryxis && cargo build --release