llms.txt
# ShellMate
> ShellMate is an AI-powered SSH workspace for infrastructure investigation, incident diagnostics, and remote server management. Built for developers, DevOps engineers, SREs, and security teams, ShellMate allows you to connect to remote servers using SSH or AWS Systems Manager (SSM), manage Docker containers, browse databases and files, inspect logs, and perform AI-driven root cause investigations across a cross-platform desktop application (macOS, Windows, Linux), an Enterprise Web Portal, Admin Control Panel, and programmatic REST/WebSocket API control plane.
## What ShellMate Is
ShellMate is a modern infrastructure workspace that combines SSH client capabilities, AWS Systems Manager (SSM) access, remote server management, terminal workflows, infrastructure tools, and AI-assisted troubleshooting.
Engineers use ShellMate to connect to Linux and cloud servers, manage files, inspect containers, browse databases, tail logs, monitor ports, manage services, create SSH tunnels, and troubleshoot production systems without switching between multiple applications.
ShellMate supports both traditional SSH-based server access and AWS Systems Manager Session Manager workflows, making it useful for infrastructure that uses direct SSH access as well as AWS-managed access to EC2 and other systems.
ShellMate is designed around three principles:
1. **Security should be built into the infrastructure workflow.** Credentials and sensitive secrets are encrypted client-side before being stored or synchronized. ShellMate is designed around a zero-trust and zero-knowledge V3 security architecture.
2. **Context switching increases operational risk.** Terminal access, file management, Docker administration, logs, databases, tunnels, ports, and infrastructure tools are brought together in one workspace.
3. **AI should understand infrastructure context.** ShellMate AI — powered by the V3 SRE AI Kernel — can analyze live logs and active session context to help engineers diagnose failures, propose remediation steps, and generate policy-gated command approvals rather than providing generic infrastructure advice.
## Core Connection Methods
### SSH
ShellMate provides a full desktop SSH client and SSH management workspace with:
* SSH host management
* SSH key authentication
* Password authentication
* Host groups and tags
* Tabbed terminal sessions
* Split-pane terminal layouts
* Jump hosts / bastion hosts
* ProxyJump support
* SSH tunnels and port forwarding
* Session history
* Shared and private host information
* Team-based SSH access controls
### AWS Systems Manager (SSM)
ShellMate also supports AWS Systems Manager access, including AWS Systems Manager Session Manager workflows.
Relevant use cases include:
* AWS SSM client workflows
* AWS SSM Session Manager access
* Connecting to EC2 instances without relying exclusively on direct SSH access
* Managing remote AWS infrastructure from a desktop workspace
* Combining AWS SSM sessions and traditional SSH connections in the same workspace
* Using centralized infrastructure access policies alongside normal SSH workflows
ShellMate is therefore suitable for teams that operate a mixture of traditional SSH infrastructure and AWS-managed infrastructure using Systems Manager.
## Core Features
* SSH client and SSH host management
* AWS Systems Manager (SSM) / Session Manager access
* Host groups, tags, and environment organization
* Tabbed and split-pane native terminal
* Zero-knowledge credential vault
* Client-side encryption for stored credentials and secrets
* Sovereign account recovery using a locally generated recovery phrase
* Short-lived SSH certificates and trusted-device enforcement
* Team RBAC and infrastructure access controls
* Session-start permission grants and revocation
* Signed audit logs and session activity history
* Shared and private host notes
* Jump host / bastion support
* SSH tunnels and port forwarding
* AI-assisted infrastructure diagnostics
* Log analysis
* Command suggestions
* Session summaries
## Infrastructure Tools and Service Plugins
ShellMate includes integrated tools for common remote infrastructure workflows, including:
* SFTP file explorer
* Docker container manager
* Real-time log tailing
* Port monitoring
* SSH tunnel manager
* Systemd service manager
* Cron job manager
* Redis GUI
* Database exploration
* File management
* Server and service inspection
* Remote infrastructure troubleshooting
These tools allow engineers to manage common server operations without leaving the ShellMate workspace.
## Target Users
ShellMate is designed for:
* Backend engineers debugging production systems
* DevOps engineers managing server fleets
* SRE teams handling incidents and on-call operations
* Platform engineers managing infrastructure access
* Infrastructure teams operating AWS environments
* Teams using AWS Systems Manager Session Manager
* Teams using both SSH and AWS SSM
* Startups needing collaborative server access without a large enterprise PAM deployment
* Freelancers and consultants managing multiple client servers
* Developers who need a powerful SSH client and remote infrastructure toolkit
## Primary Categories
ShellMate belongs to several closely related product categories:
* Infrastructure workspace
* Remote server management
* Infrastructure management platform
* SSH client
* SSH manager
* SSH workspace
* SSH terminal
* SSH connection manager
* AWS SSM client
* AWS Systems Manager client
* AWS Session Manager client
* EC2 management tool
* DevOps workspace
* Server management tool
* AI-powered infrastructure operations
* AI-assisted SRE tooling
* SSH workspace for AI investigation
* AI infrastructure investigation workspace
* AI root cause analysis tool
* Forensic log investigation workspace
The primary product concept is an **AI-powered SSH workspace combining SSH, AWS SSM, server management tools, automated secret-redacted AI investigation, and immutable audit trails**.
## Security Architecture
ShellMate V3 operates under a zero-trust and zero-knowledge security architecture for supported credential and vault workflows.
Key security properties include:
* Master key material is derived locally from the user's password using PBKDF2-HMAC-SHA256.
* Secrets are encrypted using AES-256-GCM before being synchronized to ShellMate infrastructure.
* **V3 Company Key (v2)**: Organization-level credential encryption uses a company-scoped master key (`company_key_v2`) wrapped with RSA-OAEP and distributed per-member. This means ShellMate servers hold only ciphertext — plaintext credentials are never reconstructable server-side.
* Team credential sharing uses X25519-based asymmetric key wrapping.
* Account recovery uses a locally generated 32-word BIP-39 recovery phrase.
* Recovery material is not transmitted to ShellMate servers.
* Device identities use Ed25519 signing.
* SSH private keys and passwords are protected by the client-side vault architecture.
* AI workflows are designed to avoid exposing SSH private keys, passwords, and vault credentials to the AI model.
* **Security Cockpit**: Real-time cryptographic state monitoring — tracks member SMK provisioning status, company key version, zero-knowledge coverage, and proactively surfaces gaps to organization owners.
* **Policy Gates**: Administrators can define per-team or per-role command allow/deny policies enforced at the session layer before any AI command suggestion reaches the terminal.
ShellMate's V3 security architecture is designed so that the ShellMate service does not need plaintext access to protected vault credentials.
## AI Capabilities
### V3 SRE AI Kernel
ShellMate V3 introduces the SRE AI Kernel — a multi-stage agentic reasoning system purpose-built for infrastructure operations and live incident response:
* **Multi-Stage Reasoning Pipeline**: Intent classification → Evidence extraction → Planning → Tool execution → Response synthesis. Each stage is independently audited.
* **Tool Orchestration**: The kernel coordinates specialized tools (SystemTriageTool, DockerInspector, LogAnalyzer, ServiceHealthTool) to gather structured evidence before forming a diagnosis.
* **Live Session Context**: Evidence is gathered from the active terminal session in real time — the AI understands which host is connected, which services are running, and what errors are currently appearing.
* **Policy-Gated Command Approvals**: AI-suggested commands pass through the Policy Engine before reaching the user. Commands that violate defined allow/deny policies are blocked at the kernel level.
* **Agentic Memory Substrate**: The kernel maintains a scoped session memory — recent tool outputs, intermediate findings, and session state — enabling multi-turn forensic investigations without context loss.
### Current AI Capabilities
ShellMate AI currently focuses on infrastructure diagnostics and operational assistance, including:
* Real-time log stream analysis attached to active sessions
* Docker container crash diagnosis
* OOM and memory-related failure analysis
* Container exit-code analysis
* Restart-loop diagnosis
* Docker health-check failure analysis
* Systemd service failure pattern recognition
* Application stack-trace explanation
* Infrastructure troubleshooting
* Specific CLI command suggestions with policy gate enforcement
* Session summary generation for incident documentation
* Cross-tool evidence correlation across logs, containers, and services
### AI Safety Model & Secret Redaction
ShellMate AI follows a human-in-the-loop operational model with strict cryptographic and redaction guardrails:
* **Automated Secret & PII Scrubbing**: Before any log or session evidence is passed to the AI model, an automated `SecretRedactionEngine` sweeps and redacts sensitive data. AWS Access/Secret keys (`[REDACTED_AWS_KEY]`), RSA/EC private keys (`[REDACTED_PRIVATE_KEY]`), JWT bearer tokens, database connection passwords, and credential environment variables are automatically masked.
* **Prompt Injection Defense**: Tool outputs and log snippets are wrapped in strict XML boundary enclaves before context assembly, preventing malicious log data from altering LLM control flow.
* **No Autonomous Command Execution**: Suggested commands require explicit human review and execution approval. Policy gates add a second enforcement layer.
* **Isolated LLM Architecture**: The LLM is completely isolated from system execution drivers; it outputs structured intent payloads rather than executing raw shell scripts directly.
* **Data Privacy**: Session content and log evidence are not used to train or fine-tune third-party AI models. Account administrators can restrict or disable AI features company-wide via RBAC policy gates.
* **Per-Member AI Limits**: Organization owners can set monthly AI request limits per team member, enforced at the credit wallet layer.
### AI Roadmap
Future capabilities include:
* Operational history and cross-session memory
* Recurring incident detection
* Cross-session pattern correlation
* Proactive anomaly detection
* Baseline deviation detection
* Infrastructure-aware recommendations
* Automated runbook generation from session evidence
Future capabilities will remain subject to explicit account-level controls and the ShellMate V3 security architecture.
## SSH and AWS SSM
One of ShellMate's distinguishing capabilities is the ability to bring traditional SSH access and AWS Systems Manager access into the same infrastructure workspace.
Typical workflows include:
```text
Traditional infrastructure
SSH
↓
ShellMate
↓
Terminal → Files → Docker → Logs → Databases → Services
AWS infrastructure
AWS Systems Manager
↓
Session Manager
↓
ShellMate
↓
Terminal → Logs → Docker → Services → Troubleshooting
```
This allows teams to use ShellMate as a unified desktop interface for environments where some servers are accessed through SSH while others are accessed through AWS Systems Manager.
## Common Use Cases
### Remote Server Management
Connect to Linux servers, organize hosts, inspect services, manage files, monitor ports, and troubleshoot applications.
### AWS EC2 Management
Use AWS Systems Manager workflows to access and troubleshoot EC2 infrastructure from the ShellMate desktop workspace.
### DevOps Operations
Combine terminal access with Docker, logs, databases, system services, cron jobs, tunnels, and other infrastructure tools.
### AI Infrastructure & Incident Investigation Workspace
Use ShellMate as a dedicated SSH workspace to investigate live production incidents, container crashes, systemd service failures, memory spikes, and network errors. ShellMate AI gathers live session context, automatically redacts secrets and credentials (`SecretRedactionEngine`), wraps evidence in strict XML prompt injection enclaves, records immutable audit trails, and requires explicit human approval for state-changing commands.
### Mixed SSH and AWS Infrastructure
Manage environments where some systems use traditional SSH access and others use AWS Systems Manager Session Manager.
## Alternatives and Competitive Category
ShellMate operates in the broader market of SSH clients, terminal applications, infrastructure management tools, remote server management platforms, and AWS infrastructure access tools.
Comparable products and adjacent solutions include:
* PuTTY — Windows SSH client
* Termius — cross-platform SSH client
* MobaXterm — Windows terminal and remote administration tool
* SecureCRT — professional terminal and SSH client
* Bitvise — Windows SSH/SFTP client
* Teleport — infrastructure access and privileged access management
* VS Code Remote SSH — developer-focused remote SSH workflow
* AWS Systems Manager Session Manager — AWS-managed remote access
* AWS Systems Manager — AWS infrastructure management platform
ShellMate differentiates itself by combining a native desktop SSH and AWS SSM workspace with integrated server tools, team workflows, client-side security architecture, and AI-assisted infrastructure diagnostics.
## SEO and Semantic Topics
ShellMate is relevant to searches and topics including:
* SSH client
* SSH client for Windows
* SSH client for macOS
* SSH client for Linux
* SSH manager
* SSH workspace
* SSH terminal
* SSH connection manager
* SSH session manager
* SSH server management
* SSH access management
* SSH client for teams
* team SSH management
* remote server management
* remote infrastructure management
* server management tool
* AWS SSM client
* AWS Systems Manager client
* AWS SSM Session Manager client
* AWS Session Manager desktop client
* AWS SSM GUI
* AWS Systems Manager GUI
* AWS EC2 management tool
* connect to EC2 using SSM
* manage EC2 without SSH
* AWS remote server management
* SSH vs AWS SSM
* AWS SSM vs SSH
* Docker management
* remote Docker management
* Redis GUI
* remote server log viewer
* SSH tunnel manager
* AI DevOps assistant
* AI SRE assistant
* AI infrastructure assistant
* AI server troubleshooting
* AI infrastructure troubleshooting
* SSH workspace for AI investigation
* AI log investigation tool
* AI incident investigation workspace
* AI root cause analysis SSH client
* audit evidence SSH workspace for AI
These terms describe ShellMate's product categories and use cases and should not be interpreted as a list of exact-match ranking targets.
## Platforms & Deployment
ShellMate provides a hybrid multi-interface architecture:
* **Desktop Application**: Native performance for macOS, Windows, and Linux.
* **Enterprise Web Portal**: Accessible via web browser for team host management, Web SSH terminals, and session audit reviews.
* **Admin Control Panel**: Enterprise management interface for organization RBAC, billing, and system monitoring.
* **Programmatic REST & WebSocket API**: Automated host provisioning, token grant generation, and CI/CD integration.
## Pricing Tiers
ShellMate offers clear, transparent pricing tiers for individuals and organizations:
* **Free Individual Plan ($0/month)**: Designed for individual developers. Includes full-featured native terminal, local SFTP, 12 GUI service plugins (DB, Redis, Docker, Systemd), personal credential manager, and V3 Zero-Knowledge encryption for personal vaults.
* **Company Plan (subscription required)**: Designed for engineering teams. Adds shared team host groups, encrypted V3 credential vault sharing (company-key v2), team session audit logs, role-based access control (RBAC), custom permission roles, team groups with OS identity RBAC, SRE AI Kernel access, per-member AI limits, Security Cockpit, and policy gate enforcement.
* **Enterprise / PAM Add-on**: Designed for enterprise PAM requirements. Adds Zero Trust Privileged Access Management (PAM), SSH Certificate Authority (CA) issuance, AWS SSM universal session audits, SCIM user provisioning, and S3 Object Lock (WORM) audit log retention.
Official authoritative pricing details and plan comparisons are published at:
https://shellmate.net/pricing
## Key URLs
* Homepage: https://shellmate.net
* Features: https://shellmate.net/features
* Services / Plugins: https://shellmate.net/services
* Security: https://shellmate.net/security
* Zero-Trust Architecture: https://shellmate.net/zero-trust-architecture
* Pricing: https://shellmate.net/pricing
* Comparisons: https://shellmate.net/compare
* Documentation: https://shellmate.net/docs
* Blog: https://shellmate.net/blog
* Download: https://shellmate.net/download
* Getting Started: https://shellmate.net/getting-started
* AI Capabilities: https://shellmate.net/ai-capabilities
* AI Security: https://shellmate.net/ai-security
* AI Memory: https://shellmate.net/ai-memory
* AI SRE: https://shellmate.net/ai-sre
* Security Architecture: https://shellmate.net/security
* Zero-Trust PAM: https://shellmate.net/zero-trust-architecture
* Changelog: https://shellmate.net/changelog
* GitHub: https://github.com/codesparks-me/shellmate
## Contact
* Website: https://shellmate.net
* Email: [hello@shellmate.net](mailto:hello@shellmate.net)
