Features
Command and control across AWS, Google Cloud, Azure, Tailscale, and Kubernetes — one encrypted desktop app instead of a drawer of CLIs, key files, and browser tabs.
Deep divesComputeServerlessKubernetesSQL
Multi-cloud terminal
Connect AWS, Google Cloud, Azure, Tailscale, and Kubernetes, then open SSH, AWS SSM, and Tailscale SSH sessions in tabs, and move any live session into its own window. No juggling CLIs or context.
Cloud-aware AI
Ask in plain English. AI uses your cloud and session context to help you debug, troubleshoot, explain output, generate commands, and run them.
Architecture diagrams
Diagrams drawn from your real accounts place each server, database, and cluster in its network, zone, and subnet, with its egress path and load balancers. A Connectivity overlay shows how you can reach it: SSM, IAP, SSH, or Tailscale.
Encrypted vault
SSH keys, cloud credentials, and notes are encrypted on your device with Argon2id + AES-GCM before they sync. Neither your master password nor the keys derived from it is ever transmitted to us.
Terminal rendering
GPU-accelerated terminal rendering — over 900% faster than traditional rendering — so log floods and busy sessions stay fluid. Look for this badge in the app: GPU Accelerated
Cloud SSO
Sign in with AWS IAM Identity Center and Google Cloud OAuth. CloudCMD discovers your accounts and servers so you're connected in seconds.
Deep dive 01
Your servers' health and every way in, right next to the sessions you open on them.
Compute metrics
A server's Properties tab charts CPU, disk, and network history from your cloud provider's monitoring. Turn on real-time metrics and the charts fill in second by second from the host over SSM, IAP, or SSH, with a detail view for load, swap, per-core CPU, per-disk I/O, and per-mount disk space.
Connectivity
Turn on Show connectivity in a server's Diagram tab to draw each way in from You — SSM, IAP, SSH, or Tailscale — marked Ready, Needs setup, or Blocked. Click a dashed line for the read-only checks behind it, such as the SSM agent's status or a security group rule for port 22.
Advanced metrics
Turn on real-time metrics and CloudCMD charts second-by-second CPU, memory, network, and disk from the host over the same SSM, IAP, or Tailscale SSH connection you already use, alongside your cloud provider's metrics.
Deep dive 02
Lambda, Cloud Run, Cloud Functions, Azure Functions, and Container Apps under each cloud: logs, metrics, and actions without the console.
Serverless
Lambda, Cloud Run, Cloud Functions, Azure Functions, and Container Apps appear under each cloud. View logs, metrics, and config, invoke functions or execute jobs, and shift traffic between versions and revisions.
Serverless logs
View logs opens a live log tab for Lambda, Cloud Run services and jobs, Cloud Functions, Azure Functions, and Container Apps, with filtered logs per revision, execution, and inner function.
Serverless metrics
Properties opens on headline metric tiles, the traffic split, and the last hour's recent errors. The Metrics tab charts each service over 1 hour, 24 hours, or 7 days: requests, errors, latency percentiles, and instances, depending on the kind.
Serverless actions
Execute a Cloud Run job, invoke a Lambda function with a JSON payload, or start, stop, and restart Azure Function Apps and Container Apps. Stops, restarts, executions, and invokes ask first, naming the resource, region, and cloud.
Deep dive 03
EKS, GKE, and AKS clusters, browsed live: where your pods run, what they're logging, and the controls to fix them.
Deployment diagrams
A Deployment or StatefulSet's Diagram tab draws its pods inside the nodes they're scheduled on, within the cluster's VPC, zones, and subnets, with the load balancer, Ingress, and Service in front. Unscheduled pods sit apart, every tile shows its health, and clicking a pod shows its status, owner, and IP.
Kubernetes
Browse clusters, describe resources, tail pod logs, and run kubectl from an integrated view — no separate context switching.
Pod logs and exec
Follow a pod's logs, including the previous instance or every container, or exec into it in its own tab. Port-forward to a pod or Service, or open a shell already pointed at the cluster for kubectl, helm, or k9s.
Workload actions
Scale a Deployment or StatefulSet, trigger a rollout restart, or delete a stuck pod from its menu, then watch the change land: every Kubernetes view is watch-backed, with no polling.
Deep dive 04
RDS, Aurora, Cloud SQL, and Azure databases: what they are, how to reach them, and a place to query them.
SQL overview
Each database's Overview shows its engine, endpoint, network, and auth settings with console links, and ranks the ways to reach it (direct, SSH bastion, SSM relay, or the Cloud SQL connector) as Ready or Needs setup, with a checklist for the direct path.
Database connectivity
The instance's Diagram tab places the database in its network, subnet, and region. Show connectivity adds your routes from You, direct or through a relay server drawn as the hop it goes through, with a legend and each path's checks in the detail panel.
SQL
RDS, Aurora, Cloud SQL, and Azure database instances appear in your environment tree. Browse schemas, tables, and users, and run queries in a built-in editor for PostgreSQL, MySQL, and SQL Server, using cloud-native auth where it's available.
SQL AI assistant
Opt in and the AI pane joins the SQL editor. It knows the engine, version, and schema you're connected to, and helps you write, fix, and explain queries, users, roles, and grants in the right dialect.
