Features

SSH

Built-in SSH terminal

KeyHole's terminal relies on libssh2, embedded in the app: it does not depend on the system ssh and behaves the same on every Mac.

• Embedded libssh2
• Authentication: agent, key, password, keyboard-interactive
• Bounce via ProxyJump
• Known-hosts verification (known_hosts)
• ~/.ssh/config import

deploy@prod-web-01:~$ systemctl status nginx
● nginx.service - A high performance web server
   Active: active (running) since Tue 2026-09-15 08:12:04 CEST
deploy@prod-web-01:~$ tail -n 2 /var/log/nginx/error.log
2026/09/16 09:41:12 [warn] upstream response is buffered
deploy@prod-web-01:~$ 

zsh / bash

Local terminal

A local shell (zsh or bash) lives in the same workspace as your remote sessions. Prepare a file locally, push it over SFTP, check it over SSH: all without switching windows.

• zsh or bash
• Same tabs and split views as remote sessions
• Terminal themes matching the interface

SFTP

Dual-pane SFTP transfers

Local disk on the left, server on the right. Transfers happen by drag and drop, and local deletion goes through the Mac Trash — no immediate erasure.

• Two panes: local / remote
• Drag-and-drop transfers
• Local delete goes to the Trash

RDP

Native Windows Remote Desktop

KeyHole's RDP is built on IronRDP, a stack written in Rust. Rendering follows the native Retina resolution with font smoothing, and the desktop resizes dynamically as the window changes size.

• IronRDP, pure Rust
• NLA / CredSSP
• Server TLS fingerprint pinning
• HiDPI rendering at Retina resolution, font smoothing
• Dynamic desktop resizing
• Remote audio to the Mac, remote cursor
• ⌘ usable as Ctrl, Ctrl+Alt+Del and Windows key

Workspace

Tabs, splits, windows

Sessions organize into tabs, split side by side or stacked, and detach into a standalone window before being re-attached. SSH on the left, a Windows desktop on the right: everyone finds their layout.

• Tabs
• Side-by-side or stacked split views
• Sessions detachable into a window, then re-attachable

deploy@prod-web-01:~$ systemctl status nginx
● nginx.service - A high performance web server
   Active: active (running) since Tue 2026-09-15 08:12:04 CEST
deploy@prod-web-01:~$ tail -n 2 /var/log/nginx/error.log

Organization

Hosts filed away, found in one keystroke

Hosts fit into collapsible groups, instant search (⌘K) finds any machine, and 52 icons — Linux, Ubuntu, Windows, Kubernetes, Docker, Proxmox, Postgres, Raspberry… — tell roles apart at a glance.

• Collapsible host groups
• Instant search (⌘K)
• 52 host icons
• Connect with double-click or Enter

Security

Locked, sandboxed, silent

The app locks with Touch ID or a password (Argon2) after inactivity. Passwords and passphrases are stored in the macOS Keychain. No data is sent to any VigilanceX server.

• Touch ID or password lock (Argon2) after inactivity
• Secrets in the macOS Keychain
• No data sent to a VigilanceX server
• App sandboxed for the App Store

Recording

A trace of every session

Terminal sessions record to Markdown, RDP sessions to video. Everything lands in Documents/KeyHole records, ready for an intervention report.

• Terminal → Markdown
• RDP → video
• Documents/KeyHole records folder

Themes

13 interface themes

Thirteen interface themes, with matching terminal themes: KeyHole Dark, KeyHole Light, Minuit, Graphite, Nord, Solarized Light, Dracula, Tokyo Night, Catppuccin Mocha, Gruvbox, One Dark, Rosé Pine, Ayu Light.

Support

Built-in support

Updates go through the App Store and can be checked from the app. Something wrong? The email report automatically attaches the log to your message.

• Update checks via the App Store
• Problem report by email with the log attached