A secure, self-hosted SSH, SFTP and server operations workspace for homelabs and teams.

WebSSH combines multi-session terminals, remote file workflows, live Linux diagnostics and everyday administration in one browser-based workspace. It is multi-user by design and keeps connection data and infrastructure control on your side.

Core capabilities

• multi-session SSH, split panes and persistent tmux sessions
• live Linux monitoring and expanded diagnostics
• source-first SFTP workspace and server-to-server transfers
• LDAP / Active Directory, passkeys and OIDC
• encrypted SSH keys and host trust management
• Tailscale SSH, jump hosts and saved connections
• reusable command sets and command palette
• admin controls, audit logging and resource quotas
• verified backup, restore and secret rotation
• Docker-first, self-hosted deployment

Product site | Repository | Discussions | Container

Built with

Python Flask Socket.IO
Paramiko SFTP WebAuthn
OIDC LDAP / AD Docker Redis

Built around

• self-hosted ownership
• strong admin UX
• recoverability
• clear trust boundaries
• operational clarity
• reproducible delivery

Software should be useful beyond a demo and understandable beyond its author.

• practical features
• transparent behavior
• maintainable code
• documentation that helps

I like infrastructure you can run, inspect, break, fix and fully own.

• self-hosted services
• Docker and Linux
• backup and recovery
• automation and observability

My security background shapes how I build without turning every project into a security product.

• strong defaults
• clear trust boundaries
• authentication and auditability
• safe operational workflows

Four hunting queries for security-relevant changes to AI agents, including instruction changes, MCP servers, ownership and sharing scope.

An idempotent Azure Cloud Shell workflow for managed identity creation and Microsoft Graph permission setup.