Reach

A modern, cross-platform SSH client and remote management tool.
Built for engineers who got tired of PuTTY and wanted something that just works.

Documentation · Download · Report a Bug

Why Reach?

Most SSH tools feel like they were designed in 2005, because they were. MobaXterm is Windows-only and bloated, PuTTY hasn't changed in decades, and Termius wants a subscription for basic features.

Reach is what happens when you build an SSH client from scratch with a native UI, proper encryption, and the kind of workflow you'd actually want to use every day. No Electron. No monthly fee. Just a fast, clean tool that runs everywhere.

What's inside

Core

• SSH Terminal · Full interactive shell with WebGL rendering. Tabs, split views, and resize that actually works.
• SFTP File Explorer · Browse remote filesystems, drag-and-drop transfers, inline editing. Feels like a local file manager.
• Session Manager · Save connections with folders and tags. Credentials are encrypted at rest, not stored in plaintext configs.
• Jump Host (ProxyJump) · Connect through bastion servers with multi-hop SSH tunneling. Import hosts directly from ~/.ssh/config.

Productivity

• Port Tunneling · Local, remote, and dynamic SOCKS forwarding. Set it up once, save it with the session.
• Multi-Exec · Broadcast the same command to 10 servers at once. Handy for fleet updates.
• System Monitoring · Live CPU, memory, and disk stats from connected hosts without installing agents.

Infrastructure as Code

• Ansible · Manage playbooks, inventories, roles, and collections. Run playbooks and ad-hoc commands with streaming output. Encrypts/decrypts files with ansible-vault. On Windows, automatically runs through WSL.
• OpenTofu · Plan, apply, and destroy infrastructure. Browse state, manage providers and modules. Full workspace with file editor and streaming command output.

Extras

• Serial Console · Talk to routers, switches, and embedded devices over COM/TTY.
• AI Assistant · Optional AI integration for command suggestions and troubleshooting (bring your own API key).
• Encrypted Vault · Store secrets, credentials, and SSH keys in an encrypted vault with cloud sync support.
• Lua Plugins · Extend Reach with sandboxed Lua scripts. Access SSH, storage, and UI hooks through the host API.
• Auto-Updates · The app checks for updates on startup and periodically while running. No manual downloads.

Tech

Reach is a Tauri v2 app with a Rust backend and Svelte 5 frontend. The entire SSH stack runs natively in Rust through russh, with no OpenSSH dependency. The UI is rendered in a system webview (not bundled Chromium), so the final binary is small and memory usage stays low.

Getting started

Grab the latest release from the Releases page. Installers are available for Windows (NSIS), macOS (.dmg), Linux (.deb, .AppImage, .rpm), and Android (.apk).

Building from source

You'll need Rust, Node.js 22+, and the Tauri prerequisites for your OS.

git clone https://github.com/alexandrosnt/Reach.git
cd Reach
npm install
npm run tauri dev

For a production build:

npm run tauri build

Project structure

graph LR
  root["🗂 Reach"]

  root --> src["📁 src · Svelte frontend"]
  root --> tauri["📁 src-tauri · Rust backend"]
  root --> gh["📁 .github/workflows · CI/CD"]

  src --> routes["📄 routes"]
  src --> lib["📁 lib"]

  lib --> components["📁 components"]
  lib --> state["📄 state · Reactive .svelte.ts modules"]
  lib --> ipc["📄 ipc · Tauri command wrappers"]
  lib --> i18n["📄 i18n · Internationalization"]

  components --> layout["📄 layout · AppShell, TitleBar, Sidebar"]
  components --> terminal["📄 terminal · SSH terminal, multi-exec"]
  components --> explorer["📄 explorer · SFTP file browser"]
  components --> sessions["📄 sessions · Connection manager"]
  components --> tunnel["📄 tunnel · Port forwarding UI"]
  components --> vault["📄 vault · Encrypted secrets"]
  components --> ai["📄 ai · AI assistant panel"]
  components --> ansible["📄 ansible · Ansible automation"]
  components --> tofu["📄 tofu · OpenTofu IaC"]
  components --> settings["📄 settings · App preferences"]
  components --> shared["📄 shared · Button, Modal, Toast"]

  tauri --> taurisrc["📁 src"]
  taurisrc --> ssh["📄 ssh · SSH client via russh"]
  taurisrc --> sftp["📄 sftp · File transfers"]
  taurisrc --> tvault["📄 vault · Encrypted storage, crypto"]
  taurisrc --> ttunnel["📄 tunnel · Port forwarding engine"]
  taurisrc --> pty["📄 pty · Local terminal (desktop)"]
  taurisrc --> serial["📄 serial · Serial port (desktop)"]
  taurisrc --> monitoring["📄 monitoring · Remote system stats"]
  taurisrc --> ansible["📄 ansible · Ansible project & runner"]
  taurisrc --> tofu["📄 tofu · OpenTofu project & runner"]
  taurisrc --> tipc["📄 ipc · Tauri command handlers"]

Changelog

See CHANGELOG.md for the full release history.

Contributors

Thanks to those who have contributed to Reach:

ddwnbot SSH host key verification (TOFU)

alien-ye Click-to-copy terminal selection

Contributing

Contributions are welcome. Bug reports, feature ideas, and pull requests all help. If you're picking up a larger feature, open an issue first so we can talk about the approach.

License

Licensed under the MIT License.

This project is free software: you are allowed to use, modify, and redistribute it for personal, academic, or commercial purposes under the terms of the MIT license. See the LICENSE file for full details.