Built-in SSH client
Terminal based on libssh2, independent from the system ssh. Agent, key, password or keyboard-interactive auth.
SSH · SFTP · RDP — macOS
SSH, SFTP and Windows desktop. One Mac app.
KeyHole brings an SSH terminal, an SFTP browser and Windows Remote Desktop together in a native app, crafted like a consumer tool.
macOS 13 Ventura or later · Apple Silicon Mac
deploy@prod-web-01:~$ systemctl status nginx ● nginx.service - A high performance web server Active: active (running) since Tue 2026-09-15 08:12:04 CEST deploy@prod-web-01:~$ tail -n 2 /var/log/nginx/error.log 2026/09/16 09:41:12 [warn] upstream response is buffered deploy@prod-web-01:~$
screenshot-home.png — main window, SSH sessionNative RDP
Windows desktop with audio, HiDPI rendering at native Retina resolution and dynamic resizing.
Touch ID lock
App locked by Touch ID or password. Secrets stored in the macOS Keychain.
Features
Your Linux servers and Windows machines, in the same window
SSH terminal
Built-in libssh2, ProxyJump, known_hosts verification, ~/.ssh/config import.
Dual-pane SFTP
Local disk on the left, server on the right. Drag-and-drop transfers, local delete goes to the Trash.
RDP remote desktop
NLA/CredSSP, remote audio to the Mac, remote cursor, ⌘ usable as Ctrl, Ctrl+Alt+Del.
Split views
Tabs, side-by-side or stacked views, sessions detachable into a window and re-attachable.
Host organization
Collapsible groups, instant search (⌘K), 52 host icons, connect with double-click or Enter.
Local security
Lock by Touch ID or password (Argon2) after inactivity. Passwords in the macOS Keychain.
Session recording
Terminal to Markdown, RDP to video, stored in Documents/KeyHole records.
13 themes
KeyHole Dark, Nord, Dracula, Tokyo Night, Catppuccin Mocha… with matching terminal themes.
Security and privacy
Nothing leaves your Mac
Secrets in the Keychain, no account, no telemetry. KeyHole is sandboxed for the App Store: it only sees what you give it.
Verified connections: known_hosts for SSH, TLS fingerprint pinning of the server for RDP.
Secrets in the macOS Keychain
Passwords and passphrases are stored in the Mac Keychain, never in a plain-text file.
Automatic lock
The app locks with Touch ID or a password (hashed with Argon2) after a period of inactivity.
No VigilanceX server
No data — hosts, credentials, sessions — is sent to any VigilanceX server. No account, no external sync.
Sandboxed app
Distributed through the Mac App Store, KeyHole runs inside the macOS sandbox.
Pricing
Free to start, then the plan that fits
Free version limited to 2 hosts. Payment managed by Apple, cancel anytime from your Apple account.
Free
€0 no time limit
Up to 2 hosts, no credit card. Session recording not available.
- 2 hosts maximum
- SSH, SFTP and RDP, no time limit
- Upgrade to a Pro plan whenever you want
Yearly
€39/year
i.e. €3.25/month — 35% savings versus monthly.
- All features, all the time
- Updates included
- Cancel from your Apple account
Monthly
€4.99/month
No commitment, for a one-off assignment.
- All features
- No commitment
- Cancel from your Apple account
Perpetual license KeyHole 1
€99
One-time purchase. All KeyHole 1 updates included.
- Every KeyHole 1 update
- Major versions (roughly every 2.5 to 3 years) sold separately
- Preferential pricing for license holders
Companies — Per-seat license keys, outside the App Store, on request at contact@vigilancex.io.
macOS 13 Ventura or later · Apple Silicon Mac
Frequently asked questions
What are the system requirements?
macOS 13 Ventura or later, on an Apple Silicon Mac. KeyHole is distributed exclusively through the Mac App Store.
What does the free version include?
Up to 2 hosts, SSH, SFTP and RDP, with no time limit and no credit card. Session recording is reserved for Pro plans. You upgrade from within the app, through the App Store — nothing is charged without your consent.
Where is my data stored?
Only on your Mac. Hosts, keys and sessions stay local; passwords and passphrases go to the macOS Keychain. There is no account, no cloud, no telemetry.
What does KeyHole replace day to day?
The SSH/SFTP client you already use — plus an RDP client. Your Linux servers and Windows machines live in the same window, with tabs and split views.
How do I cancel a subscription?
From your Apple account (Settings → Subscriptions), like any App Store app. Access stays active until the end of the current period.
What does the perpetual license cover?
€99 once: every KeyHole 1 update is included. New major versions (roughly every 2.5 to 3 years) are sold separately, with preferential pricing for license holders.
One tool to open in the morning
SSH, SFTP and RDP in one native Apple Silicon app.
Download on the Mac App Store
Free version with up to 2 hosts, no time limit. Purchases managed by Apple.