OSH vs Shellter

OSH turns your iPhone into a hardware-backed approver for zero-trust SSH access. Instead of long-lived SSH keys scattered across laptops, your team's gateway issues short-lived SSH certificates only after a human approves each request. OSH is where that approval happens — on a device you carry, protected by Face ID and the Secure Enclave. HOW IT WORKS • Enroll your device by scanning the gateway's QR code. • When someone requests SSH access, OSH shows you who, what, and where. • Approve or deny with Face ID. Your approval is signed by a key that lives only in the Secure Enclave. • The gateway issues a short-lived certificate — no standing keys, no shared secrets. WHY IT'S SECURE • The signing key is generated inside the Secure Enclave and is non-exportable — it can never leave your iPhone. • Every approval requires biometric authentication. • OSH connects only to the gateway you configure. It has no analytics, no trackers, no ads, and no third-party SDKs. FOR TEAMS • Role-aware: signers, admins, and root see the controls appropriate to them. • Review access rules, approval history, and gateway logs from the app. OSH requires a compatible zero-trust SSH gateway to connect to. If your organization doesn't run one yet, contact us at ad@openlay.com.

Shellter is an SSH, SFTP and FTP client that keeps everything on your phone. There is no account to create, nothing syncs, and the app sends no telemetry. It opens connections to the servers you type in, and makes no other network request. That is the whole product. A REAL TERMINAL — An interactive shell rendered with xterm, not a toy console. It follows the keyboard, resizes the remote PTY when you rotate the phone, and keeps 10,000 lines of scrollback FILES WITHOUT A SECOND LOGIN — Browse, upload, download, rename, delete and create folders over SFTP or FTP. Open the file browser from inside a live SSH session and it reuses that connection instead of opening another one. A download never silently overwrites a file you already have. HOST KEYS, PINNED AND CHECKED — The server's host key is pinned the first time you connect and compared on every reconnect. If it does not match, the connection stops BEFORE authentication — your password is never sent to a server that failed the check. WHERE YOUR SECRETS LIVE — Passwords and private keys go into the iOS Keychain, hardware-backed where supported, stored "this device only" so they cannot be restored onto another phone. HONEST ABOUT PROTOCOLS — SSH and SFTP are verified by host-key pinning. FTPS is encrypted but does not verify the certificate. FTP is cleartext. Prefer SFTP.