live · ssh · guarded by Devi
Thread Nimbus

The SSH client that
earns your trust.

Real terminals. Credentials in your OS keychain. An AI agent that only changes servers with your say-so.

Get Thread Nimbus — $1 Watch demo
52s · product demo

Download after purchase

Thread Nimbus is free. Give us an email and phone number and your install command appears instantly. Your email is your licence — come back to your account and download it again any time, on any machine, forever. It opens the right installer for your device (macOS .dmg, Windows .exe, Linux .AppImage).

0
terminal themes
0
platforms · mac / win / linux
0
secrets stay in your keychain
0
install
How it works

Connect. Investigate. Approve.

Built for operators who live in terminals and refuse to paste secrets into a chatbot.

01

SSH as you already do

Add hosts, open real xterm sessions over ssh2, SFTP and port-forward. Passwords and keys stay in the OS keychain — never on disk.

02

Ask Devi over the live session

Devi investigates with read-only commands on the host you’re already authenticated to. Findings are concrete — reclaimable GB, misconfigs, runaway processes.

03

You approve every change

Mutating commands need your confirm. Destructive patterns are blocked in main — the UI can’t bypass the classifier. Everything lands in the audit trail.

The conviction stack

Built so you’d feel reckless
using anything else

Not engagement bait — the features that let a serious operator run this on a recorded call, on a shared screen, against production, and never sweat it.

Command Audit Trail

Every command that ran — yours and Devi’s — with its safety classification and exit outcome, exportable to a file. Not “it’s safe,” but proof of exactly what happened.

09:14:02Z YOU OK df -h /
09:14:07Z DEVI OK docker system df
09:14:19Z DEVI BLOCKED rm -rf /var

Presentation Mode

One keystroke blanks every IP and hostname across the app and the live terminal. Screen-share or record without leaking your infrastructure.

⌘⇧H · instant

Secret Shield

Masks tokens, API keys, passwords and PEM blocks in output before they render — never in a recording or your history.

Multi-Host Broadcast

Type once, run across every selected session — the safe cluster-ssh. Each command is re-classified so a destructive one never fans out.

Real terminals · 21 themes

xterm.js over ssh2 — tabs, resize, copy/paste, SFTP, port-forward, and a semantic highlighter that tints plain output on-theme.

Parameterized Runbooks

Snippets with typed {{variables}} that prompt before running and show the exact resolved command. Repeatable ops without the mispasted-hostname incident.

Keychain-backed, MITM-guarded

Passwords and passphrases live in your OS keychain — never on disk. Host keys are verified before connect; a mismatch stops you cold.

Devi Assistant · subscription add-on

An agent that respects your servers

Devi works over your authenticated session — investigates with read-only commands, reports concrete findings, and only changes things with your say-so. Optional on top of the one-time app; the SSH client works fully without it.

  • ✓Read-only by default. It measures before it guesses — df, docker system df, journalctl run automatically.
  • ✓Gated in the main process. Every command is classified independently of the UI — the confirm dialog can’t be bypassed.
  • ✓Destructive is refused, not confirmed. rm -rf /, mkfs, fork bombs, curl | sh never run.
  • ✓Everything is logged to the exportable audit trail.
✦
Devi Assistant
agent · connected to prod-api-01
Why is load high and disk almost full?
✦
Scanned disk, Docker, logs and SSH config read-only. Load is a runaway ffmpeg; disk is Docker cruft + stale journals.
MED1.8 GB
Stale journals older than 30 days
$ journalctl --vacuum-time=30d Clean
⚠ Approve this command? journalctl --vacuum-time=30d
Make it yours

21 terminal themes, switched live

Four themes are free forever. Unlock all 21 — Neon, Cyberpunk, Rosé Pine and more — for a one-time $2.

COMING SOON

Scheduled Tasks
that email you back.

Run any command — or a Devi task — on a schedule, unattended, and get the results in your inbox. Nightly cleanups, health checks, backups, the cron you’d rather not babysit.

$5
/ month
Includes 15 scheduled task runs — about 33¢ each. Cancel anytime.
15 runs
every month
Nightly cleanups, health checks, backups — set them and forget them.
No charge until it ships.
Under construction
What to run
docker system prune -af && df -h
On host
prod-api-01
Schedule
Every day · 03:00
Deliver to
you@company.com
Schedule it →
Pricing

Nimbus for the price of a coffee.

The SSH client is free — install it from your terminal and re-download forever with the same email. Devi Assistant runs on live inference, so it’s a small subscription you add only if you want it. No seats, no upsells, no dark patterns.

Cheaper than your morning coffee. Get Thread Nimbus for $1 before the timer runs out — it goes to $20 forever afterwards.

days hours min sec
LIMITED-TIME OFFER

The app

$1once$20
The price of a coffee — for a limited time. Then $20, forever.
  • The full SSH client — all features
  • Terminals, SFTP, port-forward, 21 themes
  • Presentation Mode, Secret Shield, audit
  • Re-download forever with the same email
THE AI · OPTIONAL

Devi Assistant

$15/ month
Off by default. Subscribe when you want it.
  • Unlocks the Devi Assistant agent
  • Investigate, explain & fix over live SSH
  • Runs on live inference — that’s the cost
  • Stop any time · the app stays yours

Launch offer. The app is $1 while the timer runs, $20 after that — either way it’s one payment and the same email re-downloads it forever. Devi Assistant is $15/mo, or $12/month billed $144/year. Themes: 4 free, all 21 for a one-time $2. All prices USD.

FAQ

Straight answers

What people ask before putting an SSH client with an agent on production hosts.

What is Thread Nimbus?
A cross-platform SSH client with real terminals (ssh2 + xterm.js), credentials in your OS keychain, and an optional AI agent — Devi — that works over your live authenticated sessions behind safety guardrails you can audit.
Do I need Devi Assistant to use the app?
No. The SSH client is a one-time purchase and works fully without Devi. Devi Assistant is off by default and only runs once you subscribe — it’s an optional $15/month for investigation and fixes over live SSH.
Where are my passwords and SSH keys stored?
Secrets never touch disk. Passwords and passphrases live in your OS keychain. The app stores only keytar references — never the secrets themselves — and never sends them to the model.
Which platforms are supported?
Thread Nimbus ships as a signed app for macOS, Windows, and Linux. After you buy, your private one-line installer is shown right on the payment confirmation.
How do Devi’s guardrails work?
Every command Devi proposes is classified in the main process before execution. Read-only commands can auto-run; mutating ones need your confirm; destructive patterns like rm -rf / or mkfs are blocked and never offered for confirm. The UI cannot bypass this gate.
How much does it cost?
The app is $1 during the launch offer — the price of a coffee — and $20 once the countdown ends. Either way it’s a single payment, and the email you buy with can re-download it forever from your account. Devi Assistant is an optional $15/month, or $144/year ($12/mo billed yearly). Four terminal themes are free; unlock all 21 for a one-time $2. All prices USD.
Who is Thread Nimbus for?
Operators, SREs, and founders who live in SSH and need conviction over engagement — presentation-safe terminals, exportable audit trails, and an agent that won’t freestyle on production.

Buy once. Install in one line.

The signed app for macOS, Windows and Linux, free. Your one-line installer is revealed as soon as you tell us where to reach you, and your account keeps it for good.