Infra Companion is a modern, local-first desktop SSH client — everything you love about Termius, plus broadcast, bulk execution, agentless monitoring, zero-knowledge sync, an AI assistant, a plugin system, and now a local PHP/WordPress dev stack.
Free & open-source · v0.2.4 · Grab an installer from Releases — or build from source: git clone https://github.com/xShiroeNguyenx/infra-companion && pnpm install && pnpm dev
From a single SSH session to broadcasting commands across a whole cluster — without leaving the app.
Password, SSH key (ed25519/RSA/ECDSA), OS agent (incl. FIDO2), or a secrets-manager reference.
Multi-hop ProxyJump (ssh -J), each hop verified and prompted independently.
Automate su → ssh or nested SSH with encrypted expect/send steps — re-runs on reconnect.
Wrap a session in tmux so it survives drops and reattaches automatically when you reconnect.
Split into panes and type once to run on every pane at the same time.
Dual-pane file manager, edit remote files locally (auto-upload on save), even over nested SSH.
Local, Remote, and Dynamic (SOCKS5) port forwarding, sorted by name — pin the dashboard to a tab or detach it into an always-on-top window while your DB client covers the app.
VNC embedded in a tab (noVNC) and RDP over an SSH tunnel — both reach targets through your jump hosts.
Run one command across N hosts in parallel and group by output to spot the odd one out.
Agentless CPU / RAM / disk / uptime over SSH, refreshed every 3 seconds.
One master and all its slaves on one screen: real lag plus the binlog byte gap, and a copy-paste runbook for every problem it finds.
Choose from the fonts actually installed on this machine — or add a .ttf you downloaded, no OS install needed. It warns when your font isn't really there or isn't monospace.
Every tool one click away as icons, host groups as cards showing which machines are up, plus recent connections, workspaces and tunnels.
Ping, DNS lookup, and common-port scan — runs locally, no SSH required.
Zero-knowledge sync of your vault through any shared folder — the backend never sees plaintext.
Claude, OpenAI, Gemini, or local Ollama: generate commands, explain output, and a step-by-step read-only troubleshooter you approve.
Store a reference, not a password — fetched from 1Password / Bitwarden / Vault at connect time.
Record sessions as asciicast v2 and replay with seek bar and 1×–8× speed.
Extend the app with trusted JavaScript plugins running in an isolated worker.
Recolor the full UI palette per theme and export / import themes as JSON.
Pin the hosts you use most to a Favorites section at the top of the sidebar.
Select then left-click the highlight to copy; right-click to paste — alongside the usual shortcuts.
Run your PHP / WordPress sites locally instead of Laragon or XAMPP: the app downloads and supervises its own PHP, Nginx and MariaDB, serves sites at *.localhost with no hosts file and no admin rights, and provisions a database per site.
Test one machine in a load-balanced cluster without editing your hosts file: a browser window with a DNS override scoped to that window — HTTPS still validates, and you can open every server side by side.
A peek at a few of the built-in tools — no extra apps, no context switching.
Merge every open tab into split panes with one click, flip on Broadcast, and your keystrokes go to all of them. Perfect for cluster maintenance and side-by-side debugging.
Drop a trusted JavaScript plugin into a folder and it runs in an isolated Node worker — a crash can't take down the app, and it only reaches the app through a controlled API (never the vault).
Describe what you want in plain language and get a ready-to-review command — it's inserted, never auto-run. Paste a confusing command or error and get a clear explanation. Bring your own key, or keep it 100% local with Ollama.
No account, no telemetry, no cloud lock-in. Everything is encrypted on your machine.
Master password → argon2id → AES-256-GCM field-level encryption. Auto-lock after idle; unlock with Windows Hello / Touch ID.
Only an encrypted blob ever leaves your machine. The shared folder/backend never sees a single plaintext secret.
Plugins run in a separate worker and can't read the vault or secrets — a misbehaving plugin can't crash the app.
Free and open-source. Download an installer for your OS, or clone the repo and run it from source — connect your first host in seconds.