SSH client · Encrypted vault · Server protection

All your servers.
One vault.
Connected in one click.

RustFort combines a full SSH client with a locally encrypted vault: keys, passwords and hosts protected by your master password. Multi-tab terminals, SFTP and a file explorer — and nothing ever touches the cloud. And for your servers: a security report, attack blocking and alerts.

Download RustFort See the features

100%

Local encryption

0

Secrets shared

1 click

To connect

Features

Everything you need.
Nothing you don't.

Built for developers, DevOps engineers and sysadmins who take the security of their access seriously.

Unified workspace

SSH terminals and file explorers live in the same tab bar. Move freely between all your open sessions — same server or different servers — without ever closing anything. One-click reconnect if a session drops.

Terminals and files in one place

Encrypted vault

Your SSH credentials (private keys, passwords, IP addresses) are encrypted locally with a master password. Nothing is ever sent to an external server.

SQLite · ChaCha20-Poly1305 · Argon2id

Streamed SFTP transfer

Streamed upload and download — multi-GB files no longer saturate your RAM. Progress bar with real-time speed and estimated ETA.

database-backup.sql.gz 68%
1.4 Go / 2.1 Go 112 Mo/s · ETA 6s

File explorer

A full Finder-style explorer, directly on your servers: navigation, folder and file creation, built-in text editor, and per-server path favorites.

✓ Linux permissions in one click (checkboxes + octal)
✓ Per-server path favorites
✓ Built-in text editor & transfers

Commands & palette

A catalog of 80+ commands by category, a search palette, your pinned favorites and your own saved commands. Injected into the active terminal in one click.

System Docker Network Security Screen +5

SSH key & password

Supports both SSH authentication modes. Import your existing private keys from your machine, with an optional passphrase encrypted in the vault.

✓ Ed25519 / RSA / ECDSA keys
✓ Passphrase encrypted in the vault
✓ Built-in key pair generation

PDF recovery kit

When you create the vault, a secure recovery kit is generated as a PDF, with a 24-word phrase (BIP39). Perfect for regaining access if you forget your master password.

Print it and keep it safe

Encrypted export / import

Back up your entire vault into a password-protected .rfx file. Restore it on any machine in seconds — perfect for migrating or backing up offline.

ChaCha20-Poly1305 · Argon2id · .rfx

Audit log

Every action on the vault is logged locally: connections, additions, deletions, exports. A timestamped, signed history you can review at any time from the interface.

✓ Timestamp on every operation
✓ Signed log (HMAC), tamper-proof
✓ Reviewable directly from the interface

Security

Encrypted before it reaches the disk.
No cloud involved.

Your access never depends on a cloud. Every secret is encrypted before being written to disk, and the master password is never written there.

ChaCha20-Poly1305

Authenticated encryption

Each secret is encrypted individually with a unique random nonce (AEAD). Even physical access to your disk is not enough.

Argon2id

Key derivation

The master password is derived with Argon2id, using a unique salt per installation — enough to make brute-force attacks impractical.

0 bytes

Of your secrets sent to anyone

No telemetry and no sync server. RustFort only contacts its license server if you sign in to an account or a license. Your secrets never leave your machine.

100% local vault
No account required
Zero subscription
Data never shared

Server protection

Your server, under control.
Without risking breaking it.

Once your server is connected, RustFort checks its state, blocks common attacks and warns you as soon as something suspicious changes. Every change goes through a preview and your approval.

Read-only

Step 1

Security report

Looks for signs of intrusion, weak spots and upcoming failures: hidden accounts, SSH keys, open ports, missing patches, disk, backups, sites and databases. You get a verdict and what to do, in order.

Reversible

Step 2

Shield

Turns on the firewall, bans attackers who keep trying SSH, applies security patches and enforces SSH keys when it is safe to do so. Services already open stay open.

Watches only

Step 3

Sentinel

Checks the server every minute and alerts you by email or webhook: login from an unknown address, new SSH key, added root account, dropped PHP file, disk nearly full.

Preview before every change
Automatic rollback if access is lost
No agent exposed to the network
Undo at any time

Alerts go straight from your server to your inbox or webhook, never through ours. Included with the lifetime license.

Quick commands

Your built-in runbook.
Always within reach.

No more digging through notes or memorizing complex syntax. RustFort ships with a catalog of ready-to-use commands, a search palette, your pinned favorites and your own commands.

For beginners

Find the right command by typing a keyword: "docker", "disk", "logs"… The catalog guides you without needing to know the exact syntax.

For experts

Save time: the search palette runs any command, your favorites stay on top, and you can save your own commands. One click injects it into the active terminal.

🖥 System 💾 Disk 🌐 Network ⚙ Processes 📋 Logs 🔐 Security 🐳 Docker 📂 Files 💻 Screen
⚡ Quick commands
Containers docker ps -a --format 'table …'
Live stats docker stats --no-stream
Images docker images
Volumes docker volume ls
Container logs docker logs -f <nom>

↑ Click · The command runs in the terminal

Pricing

Pay once.
Keep it for life.

Start free on your first server. Buy when RustFort has become your daily tool.

Free

No account

0 €

  • 1 server
  • SSH terminal, SFTP and file explorer
  • Encrypted vault, recovery kit and .rfx export
  • 80+ ready-made commands
Download free

Free account

Just an email

0 €

  • 2 servers
  • Everything in the free plan
Create a free account

Lifetime license

One-time payment, VAT included

39 €

  • Unlimited servers
  • Automations: security report, Shield, Sentinel, HTTPS, Laravel deployment…
  • 3 devices
  • Updates included
Get the license

Servers you already saved stay accessible whatever your plan. 14-day refund through Polar. Buying requires a free account.

Platforms

macOS, Windows, Linux. Native.

RustFort is compiled natively for each platform, without Electron.

macOS

12+ Monterey

Apple Silicon & Intel

Available

Windows

10 / 11

x86-64

Available

Linux

Ubuntu 20.04+

Debian · Fedora · Arch

Available

Ready to secure
your SSH access?

Download RustFort. No account required to start, no credit card, no data collected.

SHA-256 verified

One app, all your platforms

Download for macOS

12 Monterey and up · Apple Silicon & Intel

Download for Windows

10 / 11 · x86-64
Fast install, no Electron
Updates included, continuously
Cross-platform application
Local vault, no data collected

FAQ

The questions we get most often.

Where are my server credentials stored?
Exclusively on your machine, in an encrypted SQLite vault. Your private keys, passwords and IP addresses are encrypted before being written to disk. Nothing is ever sent to an external server: no cloud, no mandatory account to use the vault.
What encryption does RustFort use?
The master password is turned into a key via Argon2id (with a unique salt per installation), then your secrets are encrypted with ChaCha20-Poly1305, a modern authenticated encryption algorithm. The master password never leaves RAM and is never written to disk.
What happens if I forget my master password?
When you create the vault, RustFort generates a PDF recovery kit containing a 24-word phrase (BIP39 standard). Keep it somewhere safe: it lets you regain access to your vault even if you forget the master password.
Can I use RustFort on several machines?
Yes. You can export your entire vault into an encrypted .rfx file, protected by its own password, and import it onto another machine in seconds. Ideal for migrating from one computer to another or keeping an offline backup.
Which SSH authentication modes are supported?
Both: private key (Ed25519, RSA, ECDSA) and password. You can import your existing keys, with an optional passphrase encrypted in the vault, or generate a new Ed25519 key pair directly from the app.
Does RustFort send data anywhere?
No telemetry and no sync server. Your connections go to your own SSH servers. The only other one is to our license server, and only if you sign in to an account or a license: it checks your license and receives no server details and no secrets.
Which operating systems does RustFort run on?
RustFort is compiled natively for Windows 10/11, macOS 12 Monterey and up (Apple Silicon and Intel), and Linux (Ubuntu 20.04+, Debian, Fedora, Arch). A native app, without Electron.
Is this a subscription?
No. RustFort is free for 1 server without an account, and 2 with a free account. The lifetime license (39 €, paid once) unlocks unlimited servers and the automations. No rental and no recurring charge, and servers you already saved always stay accessible.
Can RustFort break my server?
The security report only reads. The Shield shows a preview, asks for your approval and leaves open services open. Before touching SSH or the firewall, it schedules its own undo: if a new SSH connection does not confirm access within 5 minutes, the server reverts by itself. No tool can promise zero risk, so try it on a test server first.
Will RustFort stop a hacker?
It blocks mass attacks: firewall, banning of addresses that keep trying SSH, security patches and key-only logins. It cannot stop someone holding a valid stolen key, or a flaw in your application. That is why the Sentinel alerts you within minutes to an unknown login, a new SSH key or a new root account.