OSH vs Luma SSH

OSH turns your iPhone into a hardware-backed approver for zero-trust SSH access. Instead of long-lived SSH keys scattered across laptops, your team's gateway issues short-lived SSH certificates only after a human approves each request. OSH is where that approval happens — on a device you carry, protected by Face ID and the Secure Enclave. HOW IT WORKS • Enroll your device by scanning the gateway's QR code. • When someone requests SSH access, OSH shows you who, what, and where. • Approve or deny with Face ID. Your approval is signed by a key that lives only in the Secure Enclave. • The gateway issues a short-lived certificate — no standing keys, no shared secrets. WHY IT'S SECURE • The signing key is generated inside the Secure Enclave and is non-exportable — it can never leave your iPhone. • Every approval requires biometric authentication. • OSH connects only to the gateway you configure. It has no analytics, no trackers, no ads, and no third-party SDKs. FOR TEAMS • Role-aware: signers, admins, and root see the controls appropriate to them. • Review access rules, approval history, and gateway logs from the app. OSH requires a compatible zero-trust SSH gateway to connect to. If your organization doesn't run one yet, contact us at ad@openlay.com.

Luma is a lightweight SSH and SFTP client designed for managing remote systems from your iPhone or iPad. Connect to servers through a responsive mobile terminal, organize frequently used hosts, securely manage credentials, and transfer files without switching between multiple apps. FEATURES • Secure SSH terminal sessions • Saved hosts with groups, favorites, tags, and search • Quick Connect for one-time connections • SFTP file browsing, uploads, and downloads • Create, rename, and remove remote files and folders • Reusable command snippets with customizable variables • Encrypted storage for private keys and passphrases • Host-key verification and changed-key warnings • Automatic reconnection for interrupted sessions • Optional end-to-end encrypted configuration sync • Encrypted backup and restore • Light and dark appearance options YOUR DATA, YOUR CONTROL Luma does not require a Luma account or a paid cloud service. Sensitive credentials are encrypted on your device. Optional synchronization is end-to-end encrypted before your configuration leaves the device. Whether you maintain a home server, administer remote infrastructure, or need terminal access while away from your computer, Luma keeps your essential SSH tools close at hand. Luma is open-source software.