plutshell

Every server you can reach, in one window.

plutoops opens any machine you can SSH into: its files, terminals, health and backups, and runs a command on fifty of them as easily as one. Nothing to install on the servers.

Also runs on a Linux server, opened in your browser through an SSH tunnel.

Your Mac talks to your servers. That's the whole setup.

plutoops connects over the SSH you already use, with the keys you already have. There is no agent to install, no port to open and no daemon to keep patched, so it works on boxes you don't own as well as the ones you do.

Your Macplutoops
SSH, your keys
web-1Ubuntu
db-mainDebian
build-boxmacOS

Your plutoshell account only carries what you choose to sync between Macs, sealed before it leaves: saved passwords and keys, settings, backups.

On one server

  • FilesBrowse, edit, upload and download, with sudo when a file needs it.
  • TerminalsAs many as you like, side by side, on as many servers as you like.
  • HealthCPU, memory and disk as you work, and the processes behind them.
  • TunnelsReach a server's private ports from your Mac, or send your traffic out through it.

Across many

  • PushOne command or one file to a whole set of servers, trying the first before the rest.
  • MonitorWhich servers are up, what's filling up, and alerts when something crosses a line.
  • TagsGroup servers by environment, team or anything else, and act on a tag at once.
  • CollectorsScheduled backups of whole servers, pulled over SSH.

Kept safe

  • VaultServer passwords, keys and certificates, encrypted on your Mac before they sync.
  • BackupsEncrypted on the server before upload, with a passphrase only you hold.
  • VersionsEarlier saves of the files you edit, kept on the server and ready to restore or download.
  • SessionsTerminal history you can search and share.

Your secrets are encrypted before we ever see them.

Passwords, keys and backups are sealed on your own machine with a key made from your password. We store what we can't read.

We never get your password

Signing in sends a value worked out from it, not the password itself.

The vault opens on your Mac

Saved passwords, private keys and certificates are locked with a key only your password unlocks.

Backups are sealed on the server

They're encrypted where they're made, before upload, with a passphrase from your vault or one you type.

Narrow keys, nothing more

Each piece gets only the access it needs: the storage keys plutoshell holds are limited to one bucket.

On business accounts, terminal session history is kept as an audit trail your managers can read, and it is stored readable. That one is a deliberate trade, and we say so.

For teams who need to know who did what.

A business account puts your whole team on the same servers with roles, policies and a record of every session, without handing out shared root passwords.

People sign in to servers with short-lived certificates instead of copied keys, commands to many servers can need a manager's approval, and every terminal session is kept for audit.

RoleWhat they can do
OwnerEverything a manager can, plus the account's plan.
ManagerInvite and remove people, set login policy by tag, approve fleet-wide commands, read the audit trail.
MemberWork on the servers their tags allow, with the login methods policy allows.

One account, the apps that fit your work.

plutoops

The workbench for servers: files, terminals, Push, Monitor, tunnels and backups, for anything you can SSH into.

Download for Mac

plutoops on Linux

The same app running on a Linux server, opened in your browser through an SSH tunnel. Nothing listens on the network.

How to install it

plutodesk

Your documents and files on your Mac, with every version kept and nothing lost.

Download for Mac

Start free. Add storage or your team when you need them.

FreeFor trying it outPremiumFor your own serversBusinessFor a team
plutoops and plutodeskIncludedIncludedIncluded
Vault, synced between your MacsIncludedIncludedIncluded
Encrypted cloud backups100 MB100 GB1 TB
Roles, login policy and approvals––Included
Short-lived SSH certificates––Included
Session audit trail––Included

Open your first server in about a minute.