The only remote tool you'll ever need.
SSH, Serial, VNC, RDP, file managers and editors, all in one app — with a built-in AI agent that fixes errors for you. Start a session on your desktop, pick it up on your phone.
Don't take our word for it
Ask your AI why to switch to Tempest
One click sends the same question to ChatGPT, Gemini and Claude — no script, no spin. See what they say about Tempest versus what you're using now.
One window, everything
See it in action
Every feature below lives in the same window — no switching apps, no losing your place.
-
1
Synced host vault
Every server, credential and tag, end-to-end encrypted and available on every device you sign into.
-
2
Global command palette
Jump to any host or run any command from one keystroke, anywhere in the app.
-
3
Native GPU terminal
A real VT-compliant terminal built in Rust — fast enough to drive full-screen TUIs like vim and htop.
-
4
Storm AI, built in
An AI agent that reads your session, runs commands, and explains what it did — right beside the terminal.
AI-powered
Describe it in English. It gets done.
Tempest's built-in AI agent reads the error, plans the fix, runs the commands, and explains what changed — in one conversation, inside your terminal.
Need more than a quick fix? Connect external coding agents over ACP and hand them the long-running, complex tasks — they keep working in your session while you watch and steer from any device.
Real infrastructure work, done for you — up to 90% faster
Not just autocomplete — hand it the whole job. It plans, runs the commands across your real session, checks its own work, and reports back.
> I can't connect to 10.x.x.x — help me troubleshoot.
- Checks reachability: ping, traceroute, and the target port
- Inspects local routing, firewall rules, and security groups
- Tests the service itself once the network path is confirmed
- Pinpoints exactly where the path breaks and proposes the fix
> My apt install has package conflicts — help me fix it.
- Reads the exact conflict error and dependency chain
- Checks installed/held versions and any third-party PPAs
- Resolves the conflict — hold, downgrade, or purge as needed
- Reinstalls cleanly and verifies the package works
> This tar file is our software update — help me install it.
- Extracts and inspects the archive contents first
- Backs up the current version before touching anything
- Stops the service, installs, and restores config/permissions
- Restarts and verifies the new version is healthy
> There's an STP loop somewhere on the network — check all 12 switches and find it.
- Opens a session on every switch in parallel, not one at a time
- Reads spanning-tree state across all of them side by side
- Cross-references blocking/forwarding ports to trace the loop's physical path
- Pinpoints the offending switch and port, and proposes the fix
> Migrate this server's MySQL database to Postgres.
- Dumps the live MySQL schema and data with mysqldump
- Converts types, indexes and constraints to Postgres equivalents
- Provisions Postgres and loads the converted data
- Runs row-count and checksum diffs to verify the migration
> Upgrade Kubernetes on this cluster. Make sure backups exist and everything stays compatible.
- Snapshots etcd and every PersistentVolume first
- Scans manifests and Helm charts for deprecated APIs
- Upgrades the control plane, then node pools, one at a time
- Re-runs health checks and keeps a rollback plan ready
Everything, one app
A better SSH & SFTP client — and everything your infra team asks for
A native Rust core that gets out of your way, plus every zero-trust gateway, legacy quirk, and enterprise checkbox that shows up on a real IT checklist.
120Hz native performance
GPU-accelerated rendering — Metal on iOS, Vulkan on Android — sustains 120Hz under heavy load.
14 protocols, one app
SSH, RDP, VNC, SFTP, FTP, S3, WebDAV, Telnet, RCON, Kubernetes, Serial, Local Shell, MSYS, Zmodem.
Keyboard-first
Every action has a shortcut. Manage connections, files and tabs without reaching for the mouse.
Global command palette
Pop it open from anywhere and launch a new session in a single keystroke.
Bulk edit hosts
Multi-select across your whole host list and edit tags, folders, or settings on hundreds of hosts at once.
Zero-knowledge E2E
Encryption happens only on your device — every protocol, credentials never leave your control.
Cross-platform sync
Every host, credential and setting synced end-to-end encrypted across Windows, macOS, Linux, iOS and Android.
Continuous sessions
Start on desktop, live read & write mirror to your phone over its own end-to-end encrypted protocol.
Enterprise self-hosted
Run your own sync + Web Mode server — Docker or Kubernetes deploy, entirely inside your network.
Zero-trust gateways
Native presets for Teleport, Cloudflare Access, Tailscale SSH, AWS SSM and GCP IAP.
HashiCorp Vault
Authenticate SSH with credentials fetched live from your own Vault — KV secrets or signed certs, nothing stored locally.
Multi-tenant vaults
Every team's vault is isolated at the storage layer — not just access control.
Access policy binding
Fine-grained policies bound to hosts and vaults, per user or group, enforced server-side.
SSH agent forwarding
Forward your Tempest-managed keys or a system / 1Password agent — keys never leave your device.
YubiKey / FIDO2
Hardware-backed SSH keys — private keys never touch disk, ever.
SFTP sidebar
Browse, edit and transfer files from a side panel without ever leaving your terminal tab.
Scratch Pad & Snippets
Markdown notes and saved commands, synced everywhere.
Scheduled runs
Auto-run a snippet on a schedule for unattended inspections — AI summarizes the output into a report for you.
Smart push notifications
Tempest Push, Telegram or Discord — AI reads the exit code and result, and only pings your phone when it's actually worth knowing.
Auto-reconnect
Sessions recover automatically after Wi-Fi drops, sleep, or a flaky VPN — no manual redial.
Performance monitor
Live per-core CPU, memory, disk and network for every host, right in the sidebar.
Windows RDP & VNC
Full remote desktops, not just terminals — Windows, macOS screen sharing, and Linux VNC.
Moonlight streaming
Low-latency game-streaming protocol support, for remote desktops that need to feel instant.
Legacy device support
Configurable backspace behavior and encoding fallbacks for decades-old switches and serial consoles.
HTTP & SOCKS5 proxy
Route SSH or RDP through a proxy or a custom ProxyCommand — corporate networks welcome.
Jump host chaining
Recursive bastion hops, GUI-driven — like ProxyJump, without the flag soup.
Mosh support
UDP-based sessions that survive network changes and laptop sleep without losing your session.
Connection multiplexing
Reuse one master SSH connection per host — every new tab opens instantly, no re-handshake.
X11 forwarding
Run a remote GUI app and have its window appear on your local desktop — no VNC setup needed.
Built-in iPerf3
Run bandwidth benchmarks straight from Tempest — no separate tool to install.
Session recording
Record any session and export it as an asciicast — replay it for debugging or an audit trail.
Additional password
Save a second password (like sudo) and have Tempest send it into the session automatically.
Kubernetes workflow
Every cluster in its own isolated shell — kubectl, Helm, k9s and stern auto-pick the right context.
TUI automation
A real VT terminal lets the AI drive full-screen TUIs — BIOS/UEFI over serial, vim, htop.
Tempest CLI
Script connections and run commands from any shell or pipeline — headless, automation-ready.
MCP server
Plug Tempest into Claude or any MCP client and let the agent operate remote hosts itself.
One workspace
Unlimited tabs. Everything in one grid.
Text editors, file explorers, terminals, RDP and VNC consoles — like a Dell iDRAC remote console — plus AI, Tempest Drive, and the Performance Monitor. Open as many as you want and lay them all out in a single grid. No alt-tab, no app-switching.
Teams
Collaborate with your team
Remote support without driving to the data center — join a live session from wherever you are.
-
No more "can you come over here?"
-
Share a live SSH, Local terminal, Serial, or Kubernetes session with a link. Whoever's helping just joins from wherever they are — no walking over, no screen-share app.
-
Join from a phone, not just a laptop
-
Teammates can join a shared session straight from iOS or Android — full read and write, same as on desktop.
-
Handoff — pick up your own session, too
-
Not just for teammates — continue your own desktop session on your phone, live read & write, mid-command.
-
Fine-grained permission control
-
Bind access policies to hosts and vaults per user or group — helpers only see what they're granted, nothing more.
Testimonials
Loved by developers worldwide
"Beside its functions what is most impressive is the pace of improvements and the speed of fixes in response to minor bug reports. Not to forget you get a lifetime license at a very fair price compared to other SSH Clients subscription models. Works across multiple devices like a charm."
Works perfectly
"All the OS I use are supported (iOS, macOS, Android, Windows). Finally one app for all with Cloud Sync."
"Great app, no ads, SSH quality is good. Able to easily connect to my home Arch main PC and my Ubuntu server. Would recommend."
"Simple and objective, as things should be."
"Functional — reminds me of Mobaxterm but mobile. Good app."
"Nice app, great UX for a terminal client."
Absolutely Epic
"🤯"
"Intuitive because it is simple and objective. Solves the problem."