Most SSH vendors quietly market features they are still building. We do the opposite. This page lists every feature we ship, every feature we partially ship, and every feature still on the roadmap, with our best-effort timing. It updates at every release. If a capability is critical to your decision, it should be on this page as Shipped or it does not exist yet.
Available in production today. You can use it after install.
Partially available. Scope and current limits are stated explicitly.
On the roadmap. ETA is a best effort, not a contractual commitment.
How SecurSSH connects to your servers and moves bytes around.
| Feature | Status | ETA | Plans |
|---|---|---|---|
SSH (password & key auth) Password or SSH key authentication with passphrase, auto-detection of ~/.ssh keys, prompt detection. | Shipped | - | All plans |
Local terminal Local shell in a tab (zsh on macOS/Linux, PowerShell on Windows). | Shipped | - | All plans |
SFTP Dual-pane local/remote browser, drag and drop, inline editing, permissions, multi-select. | Shipped | - | All plans |
Agent forwarding Reuse local SSH keys (ssh -A), enabled per host. | Shipped | - | All plans |
Port forwarding (-L / -R / -D) Local, remote and dynamic tunnels with lifecycle management. | Planned | H2 2026 | Pro, Team, Enterprise |
Jump host / ProxyJump Bastion chaining configured directly in credentials. | Planned | H2 2026 | Pro, Team, Enterprise |
SOCKS / HTTP proxy Outbound proxy traversal for corporate networks. | Planned | H2 2026 | Pro, Team, Enterprise |
Encryption, identity, audits and the certifications that gate enterprise procurement.
| Feature | Status | ETA | Plans |
|---|---|---|---|
Vault lock Master password (PBKDF2 100k), Touch ID / Face ID / Windows Hello, auto-lock. | Shipped | - | All plans |
End-to-end encryption AES-GCM with a key derived from the user password, never sent to the server. | Shipped | - | All plans |
GDPR right to erasure Permanent deletion of the account and all related data. | Shipped | - | All plans |
GDPR documentation kit Downloadable DPA and processing register; DPO support being formalized. | Partial | Ongoing | Team, Enterprise |
Account 2FA (TOTP) 2FA via TOTP apps (Google Authenticator, 1Password, etc.). | Planned | Q3 2026 | All plans |
Per-host SSH config audit One-shot read-only check with OK / warn / critical report. | Planned | Q4 2026 | Team, Enterprise |
Audit log CSV export Download the full audit journal for archival or analysis. | Planned | Q3 2026 | Team, Enterprise |
SOC 2 Type II Annual certification with external auditor. Currently undergoing readiness work. | Planned | H2 2026 | Enterprise |
SSO SAML Okta, Azure AD and Google Workspace integration. | Planned | Q4 2026 | Enterprise |
Async session recording Encrypted .cast capture of PTY streams with built-in replay and team sync. | Planned | 2026 | Enterprise |
SSH certificates (CA signing) Generate, distribute and verify signed SSH certificates. | Planned | TBD 2026 | Enterprise |
FIDO2 / hardware keys YubiKey and other FIDO2 devices for SSH authentication. | Planned | TBD 2026 | Enterprise |
Team-mandatory MFA Force 2FA across the entire team from the admin console. | Planned | TBD 2026 | Enterprise |
IP whitelisting Restrict access to defined IP ranges at the team level. | Planned | TBD 2026 | Enterprise |
Approved email domains Limit invitations to a pre-defined set of email domains. | Planned | TBD 2026 | Enterprise |
How you find, group and migrate the hosts in your fleet.
| Feature | Status | ETA | Plans |
|---|---|---|---|
Host management Groups (name, color, icon), tags, favorites, sort by recent use. | Shipped | - | All plans (30 hosts / 3 groups on Free) |
Spotlight search (Cmd+K) Fuzzy search across name, hostname, user, tag (#tag syntax). | Shipped | - | All plans |
Vault import / export Password-encrypted export in our own JSON format. | Shipped | - | All plans |
Termius import Dedicated parser for Termius JSON exports, mapped to our data model. | Planned | Q3 2026 | Pro, Team, Enterprise |
The day-to-day shortcuts that compound across thousands of sessions.
| Feature | Status | ETA | Plans |
|---|---|---|---|
Tabs & split panes Horizontal/vertical splits, drag to reorder or detach. | Shipped | - | All plans |
Smart reconnect Disconnect countdown with backoff (10/20/45/90 s) and manual retry. | Shipped | - | All plans |
Per-host environment variables Key=value pairs injected via silent shell exports. | Shipped | - | All plans |
Personal snippets CRUD library, palette (Cmd+Shift+S), side panel (Cmd+Shift+B). | Shipped | - | All plans |
Team shared snippets Library synchronized through the team vault. | Shipped | - | Team, Enterprise |
Per-host startup actions Ordered list of snippets and inline commands run on every connect. | Shipped | - | All plans |
Localized native menu 8 languages: DE, EN, ES, FR, JA, PT-BR, RO, RU. | Shipped | - | All plans |
Auto-update Signed builds auto-downloaded and installed (macOS/Win/Linux). | Shipped | - | All plans |
Persistent shell history Capture and index, fzf search via Cmd+R. | Planned | TBD 2026 | Pro, Team, Enterprise |
Multi-terminal broadcast Send keystrokes to several sessions simultaneously. | Planned | TBD 2026 | Team, Enterprise |
Smart terminal autocompletion Inline suggestions while typing. | Planned | TBD 2026 | Pro, Team, Enterprise |
Pair on a session without screen sharing the rest of your desktop.
| Feature | Status | ETA | Plans |
|---|---|---|---|
Live sessions Read-only or interactive session sharing with an embedded web viewer (no install required for the spectator). | Shipped | - | Team, Enterprise |
Where credentials live and how they travel between devices and people.
| Feature | Status | ETA | Plans |
|---|---|---|---|
Local vault Encrypted IndexedDB storage, fully offline. | Shipped | - | All plans |
Personal synced vault Multi-machine sync over E2E cloud, auto backup, key derived from password. | Shipped | - | Pro, Team, Enterprise |
Team vault Secure credential sharing, team key wrapped per member. | Shipped | - | Team, Enterprise |
Multi-vaults per team Separate vaults per project, client or environment with per-vault membership. | Shipped | - | Team, Enterprise |
iOS & Android apps Native iPhone, iPad and Android apps with vault sync. | Planned | TBD 2026+ | TBD |
Roles, audit trails, and the plumbing that keeps a team accountable.
| Feature | Status | ETA | Plans |
|---|---|---|---|
Team console Email invites, member management, roles and statuses. | Shipped | - | Team, Enterprise |
Role-based access control Three roles (admin, member, viewer) with granular permissions. | Shipped | - | Team, Enterprise |
Audit log All sensitive actions: creates, edits, deletes, invites, role changes, vault events. | Shipped | - | Team (2 years), Enterprise (unlimited) |
Stripe billing Card payments, self-service portal, per-seat with auto-proration. | Shipped | - | Pro, Team, Enterprise |
Enterprise payment terms Wire transfer, check, PO, custom MSA and DPA. | Shipped | - | Enterprise |
Audit log CSV export Download the audit log for archival or external analysis. | Planned | Q3 2026 | Team, Enterprise |
SSO SAML Okta, Azure AD, Google Workspace. | Planned | Q4 2026 | Enterprise |
Plugging SecurSSH into the tools you already run. All entries below are not yet shipped.
| Feature | Status | ETA | Plans |
|---|---|---|---|
Cloud providers import Auto-sync from AWS EC2, DigitalOcean and Azure using cloud credentials. | Planned | 2026 | Team, Enterprise |
Public REST API Programmatic management of hosts, credentials and teams. | Planned | Q4 2026 | Enterprise |
Ansible inventory export Export hosts as a ready-to-use Ansible inventory. | Planned | TBD 2026 | Team, Enterprise |
Vanta sync Automatic sync with Vanta for compliance monitoring. | Planned | TBD 2026 | Enterprise |
What kind of human picks up when something breaks.
| Feature | Status | ETA | Plans |
|---|---|---|---|
Documentation & community Public documentation and community support channels. | Shipped | - | Free |
Email support (48h) Email response within 48 hours. | Shipped | - | Pro |
Priority email + chat (24h) Priority email and chat with response within 24 hours. | Shipped | - | Team |
SLA 99.9% + dedicated CSM SLA 99.9%, dedicated phone, Customer Success Manager, assisted onboarding and migration. | Shipped | - | Enterprise |
Where the SecurSSH client runs today.
| Feature | Status | ETA | Plans |
|---|---|---|---|
Desktop apps macOS (Intel + Apple Silicon), Windows 10/11, Linux (AppImage and .deb). | Shipped | - | All plans |
Web viewer Lightweight web interface to join a live session without installing the app. | Shipped | - | All plans |
iOS & Android apps Native mobile apps with vault sync. | Planned | TBD 2026+ | TBD |
Customer signal is the single biggest input into how we re-order the roadmap each quarter. If a planned feature is blocking your team, write to us with the use case. We read everything.
When a feature ships, it moves from Planned or Partial to Shipped on the same day, and the corresponding marketing pages are audited.
Quarter and half-year labels reflect our current plan, not a contractual commitment. Use them for planning, not procurement.
If a blocker emerges (security review, third-party dependency, scope change), we move a feature back to Planned and explain why in the changelog.
Decide on capabilities you can use this week, not on roadmap slides. Compare what is in the box with the rest of the market.