~/sshush % ./sshush --monitor --alert --terminal

Agentless Linux server monitoring and SSH terminal.

SSHush connects directly to your Linux servers over SSH and monitors them in real time. No agent to install, no configuration files to deploy, nothing to maintain on the server side. Add a server and start seeing metrics immediately.

When something goes wrong, SSHush tells you. Set thresholds for CPU, memory, disk, load average, temperature, and more, and receive a push notification the moment a condition is sustained. Most monitoring tools require you to check a dashboard. SSHush comes to you.

// what it monitors

// how it works

SSHush reads directly from /proc and /sys - the same sources your server uses internally. There is nothing to keep updated and no additional attack surface on your servers.

Full metrics are free, forever. Alerts are a paid add-on at $2 per server per month. When you enable alerts, SSHush's monitoring infrastructure - running across three continents - polls your server directly and notifies you the moment a threshold is breached and sustained.

Metrics work over any connection - VPN, Tailscale, local network. Push notification alerts require your server's SSH port to be reachable from the internet. If you only need metrics, no public access is required.

// built-in SSH terminal

Open an interactive terminal session to any of your servers directly from the app. Full colour support, hardware keyboard compatible, and designed for mobile use. Your existing server credentials are used - nothing extra to configure.

// security

SSHush connects to your servers from three fixed IP addresses — listed on our firewall IPs page.

Backend access is optional
The backend is only involved if you enable alerts. If you just want metrics displayed in the app, the backend never touches your server at all. The app connects directly from your device over SSH.

Monitoring keypair
A dedicated ed25519 keypair is generated on your device when you enable alerts. The private key never leaves your device or touches our servers. The public key is deployed to your server's authorized_keys with a command= restriction and the following options: command="<metrics command>",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty

This is enforced by your server, not by us. Regardless of what the SSH client requests, your server will only ever execute that one hardcoded metrics command. We cannot override it.

You can verify this yourself at any time by inspecting your ~/.ssh/authorized_keys - the entry SSHush added is clearly visible and can be removed whenever you choose.

Your credentials
Your SSH login credentials are stored in your iOS Keychain only. They are used once during initial server setup and never transmitted to our backend.

What the backend can read
CPU usage, memory, disk, network, load average, and temperature. That is all. It cannot run arbitrary commands, open an interactive shell, write files, or escalate privileges.

// a word on reliability

SSHush runs on serious infrastructure - three continents, a global load balancer, a multi-region database. We built it to be resilient and we monitor it ourselves.

But we want to be honest with you: alert delivery depends on factors outside our control - your server's availability, Apple's push notification service, your device's network connection. SSHush should not be your only line of defence for anything critical. Our status page shows you exactly what's happening when something isn't right.

// built by two people

SSHush is an indie app. There's no team of engineers, no enterprise sales process, no support department. Just two developers who wanted a proper SSH monitoring tool on their phones and couldn't find one.

That means we care about every user, we respond to every email, and when something goes wrong we'll tell you honestly what happened and what we did about it. We're not going anywhere.