Version 1.0 — now available for Windows

Every server you run.
One keystroke away.

NexSSH packs a multi-tab terminal, dual-pane SFTP, tunnels & SOCKS5, live server monitoring and a full automation toolbox into one crafted desktop app — sealed in an encrypted local vault, with zero telemetry, ever.

Windows 10/11 · 64-bit · Free account required

nexssh — session 1

➜

Multi-Tab TerminalDual-Pane SFTPZMODEM rz/szTunnels & SOCKS5Split ViewCommand Palette · Ctrl+KDocker ManagerWake-on-LAN8 Terminal ThemesEncrypted VaultZero TelemetryMulti-Tab TerminalDual-Pane SFTPZMODEM rz/szTunnels & SOCKS5Split ViewCommand Palette · Ctrl+KDocker ManagerWake-on-LAN8 Terminal ThemesEncrypted VaultZero Telemetry
0+

Built-in features & tools

Terminal, SFTP, tunnels, monitor & more

0+

Lines of source code

One app — fully self-contained

0k

PBKDF2 iterations

Vault master-key derivation

0

Telemetry & trackers

Your data never leaves the machine

Features

Everything you need to run your fleet

One polished Windows app that replaces the half-dozen tools you juggle today — and keeps every byte on your machine.

Multi-Tab Terminal

A custom-built SSH terminal with a 3,000-line scrollback, bracketed paste, live resizing and in-session search (Ctrl+F) that highlights every match.

Split View

Open a second shell on the same connection and work two sessions side by side. Ctrl+Shift+F searches across every open terminal at once.

Dual-Pane SFTP

Local ↔ remote file manager with drag & drop, a transfer queue (3 parallel jobs with pause, resume and retry) plus classic ZMODEM rz/sz support.

Encrypted Vault

Secrets are sealed with OS-grade protection (DPAPI on Windows) — or an optional master password hardened with PBKDF2 at 600,000 iterations.

Tunnels & SOCKS5

Local, remote and dynamic port forwarding with real SOCKS4/5 proxying. Quick-tunnel presets for 80, 443, 3306, 5432, 6379, 27017 and more.

Live Server Monitor

CPU, memory and network gauges streamed over SSH itself — reading /proc directly, so there is nothing to install on your servers. Threshold alerts included.

Key Manager & Generator

Generate, import and deploy SSH keys straight to a server's authorized_keys — plus a password generator with passphrase mode and a live strength meter.

Automation Toolbox

Broadcast one command to many servers, schedule recurring tasks, manage Docker containers, systemd services, crontabs and live logs — all visual.

Snippets, Macros & Hooks

Reusable snippets, pre/post-connect hooks, macros and a fuzzy Command Palette (Ctrl+K) that jumps you to any host, tab or command instantly.

Private by Design

Zero telemetry, zero analytics, no cloud. The only network traffic NexSSH ever makes is the SSH connections you create yourself.

…plus Wake-on-LAN, session restore, OpenSSH config import, terminal themes, PDF export, asciinema recording and a full audit log. See the complete description

Security

Six defense layers, zero compromises

NexSSH was developed against the OWASP ASVS and NIST SSDF guidelines from day one — not hardened after the fact.

LAYER 01

OS-Integrated Secret Storage

Saved passwords are encrypted at rest with Windows DPAPI — or with an AES encryption envelope whose key file (chmod 0600) never leaves your user profile.

LAYER 02

Optional Master Password

Lock the entire vault behind a master password: PBKDF2-HMAC-SHA256 with 600,000 iterations and a random 16-byte salt — tunable up to 10 million.

LAYER 03

TOFU Host-Key Pinning

Every server's fingerprint is pinned on first use. If it ever changes, NexSSH stops and warns you about a possible man-in-the-middle attack.

LAYER 04

Tamper-Evident Data Files

13 core data files carry HMAC-SHA256 integrity tags that are verified at every startup — silent tampering or corruption is detected and logged.

LAYER 05

Hardened Audit Log

A local, sanitized audit trail (anti log-injection, CWE-117) records connections and errors — and never records a single password.

LAYER 06

Atomic, Least-Privilege Writes

Every write is atomic, so a crash never corrupts your data. On POSIX systems files carry owner-only permissions, and on Windows secrets are sealed per-user by the OS itself.

Developed against the guidelines ofOWASP ASVS 4.0OWASP Top 10NIST SSDF SP 800-218CWE / CERTSLSA

Verified zero telemetry. No analytics, no crash reporting, no update phone-home — the only traffic NexSSH ever generates is the SSH connection you asked for.

Interface

Designed to feel effortless

A dark, focused workspace built for long sessions — hosts, terminals, files and tools within reach.

NexSSH 1.0
TerminalSFTPMonitor

➜ ssh admin@prod-web-01

Welcome to Ubuntu 24.04 LTS (GNU/Linux 6.8.0 x86_64)

Last login: Tue Sep 22 09:41:02 2026

admin@prod-web-01:~$ htop

Tasks: 168 · Load: 0.08 · CPU 12% · Mem 41%

admin@prod-web-01:~$

FAQ

Questions, answered

Free account required

Ready to take control of your servers?

Download NexSSH 1.0 for Windows, sign in with your free account, and connect to your first host in under two minutes.