Veloterm vs OSH

Veloterm is a fast, native SSH client for iPhone and iPad with a built-in AI assistant. Connect to your remote servers over SSH and work in a full xterm-256color terminal powered by SwiftTerm — with an AI helper that can suggest, explain, and fix shell commands. SECURE BY DESIGN • Host-key pinning (TOFU): a changed server fingerprint refuses the connection to defend against man-in-the-middle attacks. • Passwords and private keys are stored only in the iOS Keychain — never synced, never logged. • App Transport Security enforced. The app talks only to the SSH hosts you configure and, for AI, to Anthropic's API. AI ASSISTANT — BRING YOUR OWN KEY • Suggest, Explain, and Fix commands right from the terminal. • Uses YOUR OWN Anthropic API key, stored in the Keychain and called directly from your device. No middle-man server, no analytics, no tracking. FAST & NATIVE • SwiftUI interface for iPhone and iPad, with split-view multitasking. • Password or private-key authentication. • Import and export your host profiles. VELOTERM PRO • Free: save up to 20 hosts. • Pro (one-time purchase): unlimited saved hosts plus profile export/import. Veloterm is an SSH client — it connects to servers you control and does not run a shell on the device.

OSH turns your iPhone into a hardware-backed approver for zero-trust SSH access. Instead of long-lived SSH keys scattered across laptops, your team's gateway issues short-lived SSH certificates only after a human approves each request. OSH is where that approval happens — on a device you carry, protected by Face ID and the Secure Enclave. HOW IT WORKS • Enroll your device by scanning the gateway's QR code. • When someone requests SSH access, OSH shows you who, what, and where. • Approve or deny with Face ID. Your approval is signed by a key that lives only in the Secure Enclave. • The gateway issues a short-lived certificate — no standing keys, no shared secrets. WHY IT'S SECURE • The signing key is generated inside the Secure Enclave and is non-exportable — it can never leave your iPhone. • Every approval requires biometric authentication. • OSH connects only to the gateway you configure. It has no analytics, no trackers, no ads, and no third-party SDKs. FOR TEAMS • Role-aware: signers, admins, and root see the controls appropriate to them. • Review access rules, approval history, and gateway logs from the app. OSH requires a compatible zero-trust SSH gateway to connect to. If your organization doesn't run one yet, contact us at ad@openlay.com.