Open source · Apache-2.0

Your infrastructure.
One secure workspace.

Buzz brings local terminals, SSH, SFTP, port forwarding, and an AI shell agent into one desktop app — with every secret encrypted and every risky command checked.

Get Buzz View on GitHub
macOSWindowsLinux
production · Buzz Encrypted vault
prod-api-01logs
Last login: Wed Aug 5 09:41:20
deploy@prod-api-01 ~/apps/buzz $
$ git status --short
M  electron/domains/agent/agent-runtime.ts
deploy@prod-api-01 ~/apps/buzz $ pnpm test
Tests 64 passed (64)
Duration 2.18s
deploy@prod-api-01 ~/apps/buzz $
01 / WORKSPACE

Everything between your keyboard and your servers.

One native-feeling workspace for daily shell work and remote operations. No context switching, no scattered credentials, no mystery automation.

01

Local terminals

Native PTY-backed sessions powered by node-pty and xterm.js.

02

Remote SSH

Password or private-key auth with explicit host-key trust.

03

SFTP

Browse, transfer, resolve conflicts, and open remote files locally.

04

Port forwarding

Local and remote forwarding rules with clear start/stop control.

02 / OPERATE

Ask. Inspect. Act.
With a gate in the middle.

Buzz’s AI agent can inspect a live session and propose shell actions. Every command crosses a risk gate in the Electron main process before it reaches the terminal.

AnthropicOpenAIDeepSeekGLMKimi
agent.taskprod-api-01
“Restart the API and confirm it comes back healthy.”
1
Agent proposessudo systemctl restart buzz-api
✓
2
Main process checks riskPrivilege escalation + service mutation
!
3
You confirm the exact actionSingle-use token · bound to host, task, CWD, command
→
Secrets scrubbed
03 / SECURITY

Designed to keep the dangerous parts out of reach.

The renderer stays sandboxed. Sensitive operations stay behind a typed, validated IPC boundary. Secrets remain encrypted at rest and never cross into the UI.

ENCRYPTED AT REST

AES-256-GCM local vault

Credentials, known-host keys, AI API keys, inventory fields, and AI history stay encrypted inside the app data directory.

01

Sandboxed renderer

Context isolation on. Node integration off. Web security on.

02

Fail-closed host trust

Unknown hosts require explicit trust. Changed keys stop the connection.

03

Exact-action approval

High-risk approvals are short-lived, single-use, and context-bound.

04 / INSTALL

Open source.
Ready for your stack.

Buzz ships for macOS, Windows, and Linux. Download a packaged build from GitHub Releases, or run the project locally with Node.js 22+ and pnpm 10+.

Browse releases ↗
macOSUniversal · DMG / ZIP  ↓ Windowsx64 · NSIS installer  ↓ Linuxx64 · AppImage / DEB  ↓
Detecting your platform…All releases ↗
BUILT FOR THE SHELL

Keep control.
Move faster.

Get Buzz ↓