Wayfinder Try it free

Fix the server. Keep the fix.

SSH terminals, files, a live monitor and Kubernetes in one native Mac app. An assistant looks into a host beside you, and when the problem is solved, it writes up what was wrong and the exact commands that fixed it.

Download the free trial See pricing

7 days with everything · macOS 14 Sonoma or later · Apple silicon and Intel · Windows and Linux next

Wayfinder's window: hosts in coloured groups in the sidebar, an SSH terminal to web-01 with its files beside it, and the host's CPU, memory, network, disks and processes below.

Speaks

  • SSH and ProxyJump
  • SFTP
  • FTP and FTPS
  • SMB
  • NFS
  • WebDAV
  • Amazon S3 and compatibles
  • Kubernetes and OpenShift
  • Telnet and serial
Debug sessions

The fix, written down while it is fresh.

Press record and solve the problem the way you always do, in as many terminals as it takes, with or without the assistant. When you stop, the model reads what was typed, printed and run, and writes it up.

  1. Record

    Shell › Start Debug Session (⌥⌘R), or the button in the assistant's panel. Every terminal and the assistant are kept from then on, on your Mac.

  2. Solve it

    Work across hosts as you like. Ask the assistant along the way: it knows what you already tried in every tab, so it does not suggest it again.

  3. Keep it

    Problem, cause, fix, the commands that fixed it, caveats and prevention. Copy it into the ticket or the wiki as Markdown, or keep the commands as a snippet for next time.

nginx on web-01 would not start after the upgrade

31 October 2026, 10:42 to 10:58 · web-01, db-01 · Solved

Problem
After the package upgrade, nginx failed to start: bind() to 0.0.0.0:80 failed (98: Address already in use), and the shop answered 502.
Cause
The upgrade pulled in apache2 as a dependency, and its service started first and took port 80.
Fix
Stopped and disabled apache2, then started nginx, which came up and served the shop again.
Commands that fixed it
# web-01: free port 80
systemctl disable --now apache2
# web-01: start the web server again
systemctl start nginx
Prevention
Hold apache2 back on the web servers (apt-mark hold apache2), and alert on a failed nginx unit, not only on the 502.
An example write-up, as the Debug Sessions window shows it.
  • From what was actually run, in every terminal and by the assistant, not from memory afterwards.
  • On your Mac until you ask. Then only to the model you chose, without what looks like a password, token or key.
  • One request per write-up, with repeated output sent once. A cheaper model can be set for write-ups alone.
Ask about a host

Ask the server what is wrong.

Type a question in plain words, such as why the load is high, and an assistant looks into it with commands on the host, then answers with the lines that show it and what to do next.

  • Reading is all it does by itself. Anything that could change the host waits for your Run, with the reason, and what is hard to take back, such as deleting or restarting, asks twice.
  • Right-click what went wrong. Choose an error or a log line in the terminal and ask about it, or about the whole screen.
  • Answers as they are written, and a busy model is asked again rather than giving up.
  • Your own model: an Anthropic or OpenAI key, a gateway such as LiteLLM, or Ollama on your own network. It is off until you choose one.
  • Set up in one click: with Ollama on your Mac, Wayfinder finds its best model that can run commands and offers it. Otherwise Settings lists the models your provider has.
  • Secrets stay out: what looks like a password, token or private key is removed before the model sees it.
  • Light on tokens: long outputs are shortened, what is sent again comes from the provider's cache, and each answer says what it used.
Asked why the checkout is slow, the assistant reads nginx's and PHP-FPM's logs, says PHP-FPM is out of workers, and gives the fix to put at the prompt.
Terminal

One login per host, however many tabs.

Your hosts from ~/.ssh/config sit in a sidebar, in groups you name and colour. Every tab, split, file pane, monitor and tunnel to a host shares one connection, so a password or a security key is asked for once.

  • The OpenSSH you know. ProxyJump, Include, 1Password and Secretive agents, YubiKeys and Kerberos work exactly as they do in Terminal.
  • A dropped connection comes back by itself, and waits while the Mac is offline or asleep.
  • A production tab looks like one: its group's colour marks the tab and the status bar.
  • Old network gear that offers only retired algorithms is explained in words, and allowed for that host alone.
A tab split into three terminals on web-01, a command typed once and run in all three, under the orange bar that says how many it reaches.
Everything you reach for

Built for the work you actually do.

The tools you used to keep open side by side, in an app that feels like the rest of your Mac.

Splits that share the login

Split a tab right or down as often as it fits. Each new pane joins the connection at once, and closing the one that logged in leaves the others connected.

Type into many at once

Broadcast what you type to every pane of a tab or every terminal in the window. An orange bar says how many it reaches, and any pane can be left out.

Snippets and runs on many hosts

Keep commands with {{placeholders}} to fill in. Run one on a whole group without opening a terminal, eight hosts at a time, with each host's output kept.

Tunnels in a click

Local, remote and SOCKS forwards with presets for web pages, databases and Redis. They ride the host's connection, stay up with no terminal open, and come back by themselves after a drop.

Workspaces

Save the open tabs and their splits under a name and open them again in one go. The tabs that were open when you quit come back at launch.

Switches and consoles too

Telnet and serial consoles open in an ordinary terminal tab with splits, broadcast and snippets. Remote Desktop and VNC sit in the same groups.

Graphical programs on your Mac

Turn on X11 for a host, and programs you start there, such as virt-manager or Wireshark, open in windows of their own through XQuartz.

Old switches still connect

When a device offers only algorithms your Mac turns down, Wayfinder says so in words and allows them for that host alone, never for the rest.

Transcripts when you want them

Each terminal's output saved as plain text, readable only by you and kept 90 days. Off until you turn it on, and the status bar shows the file.

Made for the keyboard

Every common task has a shortcut, and Help › Keyboard Shortcuts lists them all.

Split right or down
⌘D⇧⌘D
Broadcast to the tab
⌥⌘I
Snippets
⇧⌘P
Ask about the host
⌘J
Start a debug session
⌥⌘R
Find in the scrollback
⌘F
Files

A file transfer app, built in.

The host's files sit beside its terminal and follow the folder your shell is in. Drag between the server and your Mac, and the queue takes care of the rest.

The shop's media on web-01 beside a folder on this Mac, three downloads going at once, each with its speed and the time it has left.
  • Transfers that survive a bad connection. One that is cut off waits and goes on from where it stopped, over SFTP and FTP, checked before it continues.
  • A clear choice when a file is already there: replace, replace only older files, keep both, or send only new items.
  • Edit a remote file in your own editor. Every save is uploaded, and never over a change someone made on the server meanwhile.
  • Compare two folders to see what is only on one side or newer there, and select what needs sending.
  • Find files anywhere below a folder, by name or a pattern such as *.log, on SFTP, FTP, S3 and shares alike.
  • Files as root through sudo on the same connection, with a bar that says whose files they are.
  • Quick Look on the server's files, and on an SSH host compress, extract and folder sizes done by the server's own shell.
  • A replaced file stays as it was: its owner, group and permissions, and a link stays a link, so the service that reads it still can.
Storage

Buckets, shares and FTP servers, next to your hosts.

Each opens in a tab of its own with your Mac's files beside it. Paste an address and the connection fills itself in, and Test Connection tries exactly what opening will.

  • S3 the way it should be: large files in parts, the right type for every file, dates kept, buckets in any region, and share links that expire.
  • Every common S3 service, from AWS and Cloudflare R2 to Backblaze B2, Wasabi, Hetzner and your own MinIO.
  • FTP and FTPS with explicit or implicit TLS, and the server's certificate shown before you trust it.
  • SMB, NFS and WebDAV mounted by macOS itself, as the Finder does.
The storage sheet for an S3 bucket on Wasabi: the kinds as tiles, then the provider, endpoint, region and bucket, with the secret key kept in the Keychain.
Monitor

See the host while you work on it.

Under the terminal, the host's system, CPU, memory, network, disks and busiest processes, with half an hour of history. Nothing is installed on the server: a short read-only script runs over the connection you already have.

The monitor strip: the host's system facts, CPU and memory graphs, network rates, disks and the busiest processes.
  • Linux and macOS hosts, from a Raspberry Pi to a database server.
  • Only for the tab in front, so a window full of tabs costs your servers nothing.
  • Never stale without saying so. Numbers that stop coming are dimmed, with the time they are from.
  • Every command it runs is in the activity log, where you can read it.
Kubernetes and OpenShift

Your clusters, without another tool.

The contexts in your kubeconfig open as cluster tabs: what needs attention and why, each node's load, the latest events, and every workload one click away. Logs, a shell in a pod, port forwards, scaling and YAML edits are all there.

A cluster tab: nodes ready, pods running, a deployment in a crash loop listed under needs attention, and each node's CPU and memory.
Switching

Bring your sessions with you.

Import the sessions you already have, in their folders. A sheet shows everything that comes in before anything is written, and what cannot come along is said, with the reason.

  • MobaXterm
  • PuTTY
  • FileZilla
  • WinSCP
  • Cyberduck
  • ssh_config
  • Jump hosts, keys and folders come along, and a session already in Wayfinder is never added twice.
  • Passwords stay behind. Those apps keep them encoded, not protected. Wayfinder asks for an SSH password when you connect and keeps it in your keychain if you like; an FTP password or S3 key goes in the connection's settings.
Importing FileZilla's sites: SFTP, FTP, FTPS, S3 and WebDAV storage in their folders, shown before anything is written.
Privacy and security

Your servers stay between you and them.

A tool that holds the keys to your infrastructure has to be easy to trust. Wayfinder is built that way.

The Mac's own OpenSSH

Connections are made by the ssh that ships with macOS, with your config and your agent. Hosts you add go in Wayfinder's own file, never into yours.

Secrets in your keychain

Passwords, FTP logins and S3 secrets stay in the macOS keychain of each Mac. They never travel with your synced hosts.

Nothing phones home

No account, no analytics. Crash reports stay on your Mac until you choose to send one. The only question Wayfinder asks VersaMinds is whether there is an update.

Careful with what servers send

A file name from a server can never land outside the folder you chose, and downloads are checked by Gatekeeper like anything from the internet.

Reviewing Wayfinder for your company? The security page says where everything is kept and what Wayfinder does by itself.

Pricing

Pay once. Keep it.

Try every feature free for 7 days. Pay once and the version you have is yours for good, with a year of updates included.

Wayfinder

For one person, on all their own Macs.

€49once, €69 after the launch
  • Every feature
  • On all your own Macs
  • Yours to keep
  • A year of updates
Buy Wayfinder

For a team

A licence for each person, in one order.

€49per person, once, €69 after the launch
  • As many people as you need
  • One invoice, with your VAT number
  • Twenty or more: ask for a quote
Buy for a Team

Launch price until 30 November 2026. Prices include VAT; the checkout works it out for your country and VAT number. Orders are handled by our reseller Paddle, the merchant of record, which takes the payment and sends the invoice. Not for you after all? Your money back within 14 days. See the terms of sale.

Platforms

On the Mac today. On Windows and Linux next.

Wayfinder starts where its makers work every day. The Windows and Linux versions follow with the same hosts, groups and snippets.

Mac Available

macOS 14 Sonoma or later, on Apple silicon and Intel. Native, signed and notarised.

Windows In the works

Windows 11 and Windows Server.

Linux In the works

The common desktops on Ubuntu, Fedora and Debian.

One email when your platform is ready, nothing else. See the privacy policy.

Questions

Good to know.

How does the free trial work?

Download Wayfinder and use every feature for 7 days, with no account and no card. When the trial ends, enter a licence to keep going. Your hosts, groups and snippets stay where they are.

What happens after the year of updates?

Wayfinder keeps working, for good. You keep every update released in your year, and newer versions are simply not offered. Renew for another year of updates whenever you want them. There is no subscription, and nothing renews by itself.

Does it replace MobaXterm, Royal TSX or Termius?

For most people, yes: terminals, file transfers, tunnels, a host monitor, X11 windows through XQuartz and saved sessions in groups, in one app. Wayfinder imports MobaXterm, PuTTY, FileZilla, WinSCP and Cyberduck sessions, so trying it costs a minute.

Which Macs does it run on?

Any Mac with macOS 14 Sonoma or later, with Apple silicon or an Intel processor.

Does it change my ~/.ssh/config?

No. Hosts you add in Wayfinder go in its own file. ssh is given a small configuration that reads Wayfinder's hosts, then yours, then the system's, so your own file stays as you wrote it. Only if you choose Use These Hosts in Every Terminal does Wayfinder add one Include line to it, so ssh in any terminal knows them too.

Can my hosts sync between my Macs?

Yes, through iCloud Drive, with your groups, snippets and workspaces. Passwords and secrets stay in each Mac's keychain.

What does a debug session keep, and where?

From when you start it until you end it: what every terminal printed and what was typed in it, the assistant's questions, commands and answers, and what Wayfinder ran for a button. It stays in a folder on your Mac, readable only by you, until you delete it. Nothing is sent until you ask for the write-up, and then only to the model you chose, without what looks like a password, token or key.

What does the assistant cost to run?

Nothing extra from us: it is part of Wayfinder. Your model's provider bills you for what it reads and writes, and every answer and write-up says how many tokens it used. With Ollama on your own network it costs nothing at all.

Does the assistant send my servers' data anywhere?

Only to the model you choose, and only when you ask a question. Settings lists everything it is sent. With Ollama on your own network, nothing leaves it.

When are Windows and Linux coming?

Once the Mac version is complete. Leave your address above and you will get one email when your platform is ready.

Can I get a refund?

Yes. If Wayfinder is not for you, ask within 14 days of buying, through the link in Paddle's receipt or by writing to [email protected], and you get your money back. No reason needed.

Find your way to every server.

Try Wayfinder free for 7 days, with every feature, the assistant and debug sessions included.

Download for Mac See pricing