EARLY ACCESS

A terminal that thinks before it runs

Dynozen is a desktop SSH client with terminal, SFTP, tunnels and proxy-jump chains, plus an AI agent that investigates your servers, explains command output, and proposes commands. Every action confirmed by you, everything stored locally.

macOS · Apple Silicon & Intel · v0.1.0
Dynozen
web-prod-01 staging-eu
VAULT UNLOCKED New session
web-prod-01 deploy@10.0.4.11:22 PROD
deploy@web-prod-01 ~ $ df -h /var
Filesystem   Size  Used  Avail  Use%  Mounted on
/dev/sda2    120G  114G  5.6G   95%   /var
deploy@web-prod-01 ~ $ du -sh /var/log/* | sort -h | tail -3
2.8G  /var/log/app
3.1G  /var/log/syslog.1
41G   /var/log/nginx
deploy@web-prod-01 ~ $
connected UTF-8120×3412ms
Agent investigating…
Investigation · “disk is filling up”
analysis/var at 95%, checking what grows fastest.
randu -sh /var/log/* | sort -h
summarynginx logs grew to 41 GB; logrotate broke after the 1.27 update.
CONFIRMmutating command, needs your OK
journalctl --vacuum-size=2G
Approve Deny
Agent never runs mutating commands without your approval.
FEATURES

Terminal, tabs & split panes

A real interactive PTY with session tabs and horizontal or vertical splits. Reconnect every pane at once.

~ $ htop
CPU [|||||||     34%]
Mem [||||||||||| 68%]
~ $

Investigation Agent

The AI runs read-only diagnostics over SSH first, and asks before anything destructive.

Proxy Jump / bastion chains

Reach private hosts through multi-hop you → bastion → target chains, with separate credentials per hop.

SFTP file manager

Browse, upload and download with pause, resume and cancel, plus mkdir, rename, chmod and quick preview.

Port forwarding

Local (-L) and remote (-R) tunnels through the whole SSH chain, with live status.

Encrypted Vault

AES-256-GCM behind an Argon2 master password. Stores SSH secrets, key paths and AI tokens on your device.

Server manager with groups

Organize servers into colored groups and folders: a private, on-device inventory.

Quick commands

A searchable, grouped command library. Run in one click, with dangerous commands flagged.

Bring your own model

OpenAI, Anthropic, Google Gemini, or any OpenAI-compatible endpoint.

OPENAI ANTHROPIC GOOGLE GEMINI CUSTOM

SSH key import

Auto-pick keys from ~/.ssh and your config, or drag & drop. Stored encrypted in the vault.

AGENT

Careful by design

The agent reads before it writes. It prefers read-only commands, explains what it finds, and pauses for your approval before anything changes state.

Why is nginx returning 502?
Ran systemctl status nginx
The service is active, but upstream php-fpm is down. That's the source of the 502.
CONFIRM Confirmation required
Purpose: Restart the php-fpm service to restore the upstream.
sudo systemctl restart php-fpm
Approve Deny
SECURITY

Your keys never leave your machine

AES-256-GCM

Keys and credentials are encrypted at rest on your device.

Local-first

No cloud sync. Your servers stay yours.

Host key verification

Host fingerprints are pinned on first connect (TOFU), so you're warned the moment a server key changes.

Get Dynozen

Free while in early access · v0.1.0 · macOS Coming soon · not yet released