Vectron

One encrypted vault. Every session, on every device.

SSH, Telnet, serial, RDP and VNC for network and system engineers, on Mac, iPhone and iPad. One encrypted vault on all of them, and an AI assistant that asks before it changes anything.

For Mac, iPhone and iPad, coming in October 2026. 14-day free trial, and one subscription covers all three. The 15 network tools stay free without a subscription, and you don’t need an account.

Vectron on a MacBook Pro: three demo switches receive the same command by broadcast, with a Windows desktop over RDP in the fourth pane Vectron on iPad Pro: hosts and open sessions in the sidebar, and a tapped MAC address showing its maker Vectron on iPhone: a tapped MAC address shows its maker, Find on this device and Copy

Mac, iPad and iPhone. One vault, one subscription.

See it in 30 seconds

Broadcast, a Windows desktop over RDP, a config template, a tapped MAC address, the AI assistant and the vault lock. Recorded on the Mac with the demo vault.

On the Mac

Type once, run on up to four devices

SSH, RDP and VNC side by side in the same window. Open sessions in tabs, in separate windows, or up to four side by side in a grid. Turn on Broadcast1 and what you type goes to every terminal pane at once; a Windows desktop over RDP or a Mac or Linux desktop over VNC can sit next to them and is left alone.

Broadcast in a grid of four: show version typed once runs on four demo switches
  • Pause a pane to leave it out of the broadcast
  • At a sign-in prompt, your user name and password go only to the panes that are signing in too
  • Different kinds of devices in one grid (say Aruba and FortiGate)? Vectron asks first: one kind only, all of them, or cancel
  • Latency in milliseconds on every tab
  • Record sessions: terminals as text, desktops as video

Who it is for

Network engineers

Switches, routers and firewalls over SSH, Telnet or a console cable. A TFTP server for firmware and backups, SNMP checks, and config templates you can send to many devices at once.

System administrators

Linux and Unix servers over SSH and SFTP, Windows servers over RDP. Run the same command on several Linux and Unix servers at once.

IT teams and MSPs

A folder for each customer or site, credentials shared by folder, and production hosts clearly marked. All of it in one encrypted vault.

Config templates, an AI assistant and one encrypted vault

Config templates

Save the snippets you type every week, with {{variables}} where the values change. Vectron finds the variables, you fill them in and check the preview, and the finished config goes into the session you are in.

  • A ready-made template library for common switches: Cisco IOS / IOS XE, Aruba CX, HP E-Series / ProCurve, H3C / HPE Comware and Huawei VRP. Picked templates become your own, to edit as you like
  • A warning when a template was written for another kind of device
  • Command suggestions in the syntax of the device you are on, FortiGate and FortiSwitch included
The Template Library with ready-made templates for Cisco IOS, Aruba CX, HP ProCurve, H3C Comware and Huawei VRP

An AI assistant that asks first

Ask in plain words, for example “why is port 12 flapping?” or “why is the disk on web-02 full?”. The assistant reads the device with read-only commands and tells you what it found. When something needs to change, it shows the exact commands. Nothing that changes the configuration runs until you approve it.

  • Your own Anthropic, OpenAI, Gemini, Groq, Mistral, OpenRouter or Z.ai account, any OpenAI-compatible service, or a local model (Ollama, LM Studio)4
  • Knows which kind of device it is talking to, from Cisco, Aruba, Juniper and Huawei to FortiGate and FortiSwitch
  • Can search the web through Claude, Gemini or OpenAI
  • Removes the passwords and secrets it recognises before anything is sent
  • Works in terminal sessions: SSH, Telnet and serial
The AI assistant on a demo switch: it ran show version and show ip interface brief, then answered that the management address is 10.10.2.31 on Vlan10

One encrypted vault

Hosts, folders and passwords are kept in one encrypted vault. With iCloud Drive on, it lives in Vectron’s own iCloud folder, so the same vault opens on your Mac, iPhone and iPad;5 with iCloud Drive off, it stays on this Mac. It is encrypted on your device with AES-256-GCM, using a key derived from your master password with Argon2id, and it unlocks with Touch ID.

  • Folders pass their credentials down to the hosts inside them
  • Production hosts are marked, and Vectron asks before connecting
  • Vectron keeps the last 10 copies of your vault as backups
  • Password Health checks your passwords offline
  • The lock screen shows where the vault file is, with Show in Finder
Vectron with the vault locked: a Telnet session to a demo switch is covered, with the buttons Unlock with Touch ID and Unlock to Continue. Below, the AI assistant panel for that session also shows Session Locked.

Session recording

Press Rec and Vectron records what a session shows. Terminals are saved as text with timing and play back in Vectron like a video. Remote desktops over RDP and VNC are saved as video files that open in QuickTime.

  • Only what the device shows is recorded, never your keystrokes, so a password typed at a prompt is not in the file
  • A folder for each host, on your Mac
  • For change records, audits and handing over an incident

15 network tools, free to keep

On the Mac they come with Vectron and keep working with or without a subscription. They have no time limit and need no account.

Vectron Diagnostics: the list of tools grouped as Connectivity, Discovery, Name Resolution and Utilities, with Ping running and sound set to every reply

Find

  • IP ScannerFinds devices on your network with their open services. Save the results as CSV or a PDF report.
  • MAC Vendor LookupWho made a device, from its MAC address.
  • Network InfoYour addresses, gateway and DNS.

Reach

  • PingWith sound, so you hear when a device drops or comes back.
  • TracerouteThe path to a host, hop by hop.
  • MTRLive loss and latency for every hop.
  • Path MTUThe largest packet that gets through, for VPN and tunnel problems.

Check

  • Port CheckIs that TCP port open? One port, a list or a range.
  • DNS LookupName to IP and back.
  • SNMP TestIs SNMP on, and is the community string right?
  • Speed TestDownload and upload, measured with macOS’s own networkQuality.

Toolbox

  • TFTP ServerFirmware and config backups without an admin password, only on the network or VPN you choose.
  • Subnet CalculatorNetwork, broadcast and host range, IPv4 and IPv6.
  • Wake-on-LANWakes a device with a magic packet.
  • Password GeneratorStrong random passwords.

More features: import, IPAM, SFTP, RDP, topology map

Cards marked Mac are on the Mac only.

Import Mac

Connections and folders from a CSV file, your SSH config, SecureCRT, Royal TS, mRemoteNG or MobaXterm. Saved passwords are not imported.

IPAM

Subnets, VLANs, gateways and who has which address, kept next to the devices they belong to.

Session logs Mac

Every session can be written to a plain text log in a folder per host, with a warning that logs are not encrypted.

RDP and VNC Mac

Windows servers over RDP with copy and paste both ways, files dragged in from Finder (up to 10 MB each), ⌘ as Ctrl and Ctrl+Alt+Del. VNC to macOS Screen Sharing, RealVNC, TigerVNC, TightVNC and VNC on KVMs.

SFTP

Browse, download and upload files on servers and devices without leaving the app.

Topology map Mac

Run your usual LLDP or CDP neighbour commands and Vectron draws a map of the folder, with a list of what connects where. Export it as PDF or CSV.

Dashboard and Inspector Mac

Every open session at a glance with a live picture, and the details of the host you are working on in a side column. Never a password.

Tap an address

Tap an IP or MAC address in the output to ping it, trace the route, see who made the device, or find it on the switch.

A tab that needs you Mac

When a tab is waiting for a host key, a user name or a password, it is marked and you get a notification, even while you work in another tab.

Notes and on-connect commands Mac

Notes and details for each host, and commands Vectron types for you after sign-in, such as “terminal length 0”.

Try the Demo

Six sample switches that run inside Vectron. No lab needed, and nothing leaves your device.

Your data stays yours

No servers of our own, no accounts, no analytics or telemetry. AI requests go straight from your device to the provider you picked. How Vectron protects your data

Vectron for iPhone and iPad

Coming in October 2026. One subscription covers Mac, iPhone and iPad.5

Vectron on iPhone: a Telnet session to a demo switch with a command suggestion under the cursor Vectron on iPad: the sidebar with hosts, folders and open sessions, and a tapped MAC address showing its maker and Find on this device Vectron on iPhone: the demo vault with its folders, credentials, IP addresses and templates

Connections

SSH with a password or key (Ed25519, ECDSA, RSA), Telnet, RDP, VNC and an SFTP file browser. Several sessions stay open and you switch between them. On iPad, a sidebar keeps hosts, folders and open sessions at hand.

The same vault

The same encrypted vault as on your Mac, unlocked with Face ID. With iCloud Drive on, it is the same vault on iPhone, iPad and Mac. Production hosts ask before connecting.

Network work

Command suggestions for the device type, right under the cursor. Config templates with {{variables}} and the template library. Tap an IP or MAC address for ping, traceroute, the maker, or finding it on the switch. Session recording.

13 free tools

Ping, traceroute, MTR, port check, path MTU, speed test, IP scanner, MAC vendor lookup, SNMP test, network info, DNS, subnet calculator and password generator, free without a subscription.

AI assistant

Optional, in SSH and Telnet sessions, with your own provider and key. Changes wait for your approval, Vectron asks before anything is sent, and recognised passwords are removed first.

Try the Demo

Six sample switches inside the app. No account, no telemetry. Needs iOS 18 or later.

Pricing

$24.99 a year3

Free for the first 14 days.2

  • SSH, Telnet, RDP, VNC and SFTP, plus serial on the Mac
  • Broadcast and grids on the Mac, session recording everywhere
  • The encrypted vault, templates and IPAM
  • The AI assistant, with your own provider4
  • One subscription for Mac, iPhone and iPad5
  • All updates while you are subscribed

The 15 network tools are free with or without a subscription. Your AI provider bills you directly for AI use. Groq, the free tier of Google Gemini and a local AI server cost nothing.

Vectron comes to the Mac App Store in October 2026, and Vectron for iPhone and iPad is coming in October 2026 too. The beta is open on Mac, iPhone and iPad.

Tell me when it launches

Ask for a beta invite (TestFlight)

Questions

Which devices does Vectron run on?

Mac: any Mac with Apple silicon or Intel running macOS 13 Ventura or later. iPhone and iPad: iOS 18 or later. All three are coming to the App Store in October 2026.

Is there a version for iPhone and iPad?

Yes, coming in October 2026, and one subscription covers Mac, iPhone and iPad. It connects over SSH, Telnet, RDP, VNC and SFTP, opens the same vault with Face ID and comes with 13 free network tools. On iPad you work in one session on screen at a time, with the others a tap away in the sidebar. See Vectron for iPhone and iPad.

Do I need an account?

No. Purchases and the free trial are handled by the App Store with your Apple Account.

What data do you collect?

None. Vectron’s privacy label on the App Store is “Data Not Collected”: no account, no analytics, no tracking, and no server of ours that sees your devices or data. See the Privacy Policy.

Is the AI assistant included?

The assistant is part of Vectron at no extra cost, but it runs on your own AI account (Anthropic, OpenAI, Google Gemini, Groq, Mistral, Z.ai, OpenRouter or any OpenAI-compatible service) or a local model (Ollama, LM Studio), and that provider counts the tokens and bills you. Groq, the free tier of Google Gemini and a local model cost nothing.

Can the AI change my devices without asking?

No. On its own it may only run read-only viewing commands. Commands that change configuration always wait for your approval.

Where is my vault stored?

In one encrypted file. With iCloud Drive on, it is kept in Vectron’s own iCloud folder, so the same vault opens on your Mac, iPhone and iPad; with iCloud Drive off, it stays on the device. It is encrypted on your device before it is saved, so Apple stores it but cannot read it. iCloud keeps your devices in step; it is not a backup, so Vectron also keeps the last 10 copies. Touch ID (Mac) or Face ID (iPhone and iPad) unlocks it. There is no password recovery. More on the Security page.

What happens after the trial?

When the trial ends, your Apple Account is charged $24.99 for one year (US price; local prices vary), and then once a year, unless you cancel at least 24 hours before the renewal. You can cancel at any time in your App Store account settings. If you cancel, connections pause when the trial ends. The network tools stay free, and your vault file stays where it is: on your device or in your iCloud Drive.

Can I bring my sessions from another app?

Yes. Vectron for Mac imports connections and folders from a CSV file, your SSH config, SecureCRT, Royal TS / TSX, mRemoteNG and MobaXterm. Saved passwords from other apps are not imported. See Moving from another app.

Does it support SSH keys?

Yes. Ed25519, ECDSA and RSA keys, on the Mac and on iPhone and iPad. Keys are kept in your encrypted vault.

Does Vectron work without internet?

Yes. Connections to devices on your network, the vault and the tools need no internet. The App Store checks your subscription when you are online.

Is anything free without a subscription?

Yes, the network tools. On the Mac there are 15, including the IP scanner, TFTP server, ping with sound alerts, traceroute, MTR, port check, SNMP test, DNS lookup, subnet calculator and Wake-on-LAN. On iPhone and iPad, 13 network tools are free. Everything else, including connections, the vault, templates and IPAM, is part of the subscription.

Is Vectron only for network engineers?

No. It works just as well with Linux and Unix servers over SSH and SFTP, Windows servers over RDP and Mac or Linux desktops over VNC, side by side with your switches and routers.

In development

Vectron for iPhone Duo

Open it and your session keeps going on the bigger screen. Fold it halfway and it becomes a small laptop: the console on top, the keyboard below.

Vectron in the iPhone Duo simulator, open: the sidebar with hosts and folders next to a Telnet session to a demo switch
Open: the session keeps going on the bigger screen
Vectron in the iPhone Duo simulator, folded halfway: the session on the top half and the keyboard on the bottom half
Folded halfway: console on top, keyboard below

Vectron in the iPhone Duo simulator. Duo support is in development and not on the App Store yet.

  1. Broadcast works in SSH, Telnet and serial sessions: switches, routers, firewalls, and Linux, Unix or Windows servers reached over SSH. It does not apply to RDP or VNC sessions. ↩
  2. For new subscribers, once per Apple Account. Your Apple Account is charged when the trial ends unless you cancel at least 24 hours before. ↩
  3. US price. Local prices vary by country and include local taxes where applicable. Renews automatically each year until cancelled in your App Store account settings. ↩
  4. Requires your own account with an AI provider, or a local AI server. The provider charges you for its use. ↩
  5. When Vectron for iPhone and iPad is released, coming in October 2026. ↩