live · ssh · guarded by Devi
Thread Nimbus

The SSH client that
earns your trust.

Real terminals. Credentials in your OS keychain. An AI agent that only changes servers with your say-so.

Get Thread Nimbus — $35 Watch demo
52s · product demo

Download after purchase

Thread Nimbus is a one-time $35. Buy it and your private download link appears instantly — and lands in your inbox too. It opens the right installer for your device (macOS .dmg, Windows .exe, Linux .AppImage).

0
terminal themes
0
platforms · mac / win / linux
0
secrets stay in your keychain
0
install
How it works

Connect. Investigate. Approve.

Built for operators who live in terminals and refuse to paste secrets into a chatbot.

01

SSH as you already do

Add hosts, open real xterm sessions over ssh2, SFTP and port-forward. Passwords and keys stay in the OS keychain — never on disk.

02

Ask Devi over the live session

Devi investigates with read-only commands on the host you’re already authenticated to. Findings are concrete — reclaimable GB, misconfigs, runaway processes.

03

You approve every change

Mutating commands need your confirm. Destructive patterns are blocked in main — the UI can’t bypass the classifier. Everything lands in the audit trail.

The conviction stack

Built so you’d feel reckless
using anything else

Not engagement bait — the features that let a serious operator run this on a recorded call, on a shared screen, against production, and never sweat it.

Command Audit Trail

Every command that ran — yours and Devi’s — with its safety classification and exit outcome, exportable to a file. Not “it’s safe,” but proof of exactly what happened.

09:14:02Z YOU OK df -h /
09:14:07Z DEVI OK docker system df
09:14:19Z DEVI BLOCKED rm -rf /var

Presentation Mode

One keystroke blanks every IP and hostname across the app and the live terminal. Screen-share or record without leaking your infrastructure.

⌘⇧H · instant

Secret Shield

Masks tokens, API keys, passwords and PEM blocks in output before they render — never in a recording or your history.

Multi-Host Broadcast

Type once, run across every selected session — the safe cluster-ssh. Each command is re-classified so a destructive one never fans out.

Real terminals · 21 themes

xterm.js over ssh2 — tabs, resize, copy/paste, SFTP, port-forward, and a semantic highlighter that tints plain output on-theme.

Parameterized Runbooks

Snippets with typed {{variables}} that prompt before running and show the exact resolved command. Repeatable ops without the mispasted-hostname incident.

Keychain-backed, MITM-guarded

Passwords and passphrases live in your OS keychain — never on disk. Host keys are verified before connect; a mismatch stops you cold.

Devi AI · subscription add-on

An agent that respects your servers

Devi works over your authenticated session — investigates with read-only commands, reports concrete findings, and only changes things with your say-so. Optional on top of the one-time app; the SSH client works fully without it.

  • ✓Read-only by default. It measures before it guesses — df, docker system df, journalctl run automatically.
  • ✓Gated in the main process. Every command is classified independently of the UI — the confirm dialog can’t be bypassed.
  • ✓Destructive is refused, not confirmed. rm -rf /, mkfs, fork bombs, curl | sh never run.
  • ✓Everything is logged to the exportable audit trail.
✦
Devi AI
agent · connected to prod-api-01
Why is load high and disk almost full?
✦
Scanned disk, Docker, logs and SSH config read-only. Load is a runaway ffmpeg; disk is Docker cruft + stale journals.
MED1.8 GB
Stale journals older than 30 days
$ journalctl --vacuum-time=30d Clean
⚠ Approve this command? journalctl --vacuum-time=30d
Make it yours

21 terminal themes, switched live

Four themes are free forever. Unlock all 21 — Neon, Cyberpunk, Rosé Pine and more — for a one-time $2.

COMING SOON

Scheduled Tasks
that email you back.

Run any command — or a Devi task — on a schedule, unattended, and get the results in your inbox. Nightly cleanups, health checks, backups, the cron you’d rather not babysit.

$5
/ month
Includes 15 scheduled task runs — about 33¢ each. Cancel anytime.
15 runs
every month
Nightly cleanups, health checks, backups — set them and forget them.
No charge until it ships.
Under construction
What to run
docker system prune -af && df -h
On host
prod-api-01
Schedule
Every day · 03:00
Deliver to
you@company.com
Schedule it →
Pricing

Own the app. Subscribe for the AI.

Pay $35 once for the SSH client — every version, forever. Devi AI runs on live inference, so it’s a small subscription you add only if you want it. No seats, no upsells, no dark patterns.

THE APP

Lifetime

$35once
Every version of the app, forever.
  • The full SSH client — all features
  • Terminals, SFTP, port-forward, 21 themes
  • Presentation Mode, Secret Shield, audit
  • No renewals · macOS, Windows & Linux
THE AI · OPTIONAL

Devi AI

$12/ month
Launch price — regularly $20/mo. Cancel anytime.
  • Unlocks the Devi AI agent
  • Investigate, explain & fix over live SSH
  • Runs on live inference — that’s the cost
  • Requires the app · cancel & keep the app

Launch pricing. Devi AI is $12/mo now (regularly $20/mo); yearly is $10/month, billed $120/year. The app is a one-time $35 either way. Themes: 4 free, all 21 for a one-time $2. All prices USD.

FAQ

Straight answers

What people ask before putting an SSH client with an agent on production hosts.

What is Thread Nimbus?
A cross-platform SSH client with real terminals (ssh2 + xterm.js), credentials in your OS keychain, and an optional AI agent — Devi — that works over your live authenticated sessions behind safety guardrails you can audit.
Do I need Devi AI to use the app?
No. The SSH client is a one-time $35 purchase and works fully without Devi. Devi AI is an optional subscription for investigation and fixes over live SSH.
Where are my passwords and SSH keys stored?
Secrets never touch disk. Passwords and passphrases live in your OS keychain. The app stores only keytar references — never the secrets themselves — and never sends them to the model.
Which platforms are supported?
Thread Nimbus ships as a signed app for macOS, Windows, and Linux. After you buy, your private one-line installer is shown right on the payment confirmation.
How do Devi’s guardrails work?
Every command Devi proposes is classified in the main process before execution. Read-only commands can auto-run; mutating ones need your confirm; destructive patterns like rm -rf / or mkfs are blocked and never offered for confirm. The UI cannot bypass this gate.
How much does it cost?
The app is $35 once for every version forever. Devi AI is a launch-priced $12/month (regularly $20/month) or $120/year ($10/mo billed yearly). Four terminal themes are free; unlock all 21 for a one-time $2. All prices USD.
Who is Thread Nimbus for?
Operators, SREs, and founders who live in SSH and need conviction over engagement — presentation-safe terminals, exportable audit trails, and an agent that won’t freestyle on production.

Buy once. Install in one line.

A one-time $35 for the signed app on macOS, Windows and Linux. Your one-line installer is revealed the moment you pay.