Skip to content
Tessera

SSH, RDP, and VNC in one window.

Your inventory lives on your disk and your secrets in the OS keychain. No account required.

Download

macOS · Windows

web-01SSH
dc-01RDP
admin@web-01:~$ uptime
 18:04:22 up 92 days, 4:11, 2 users, load average: 0.14, 0.09
admin@web-01:~$ systemctl is-active nginx
active
admin@web-01:~$ ss -tlnp | head -3
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 511 0.0.0.0:80 0.0.0.0:*
LISTEN 0 511 0.0.0.0:443 0.0.0.0:*
admin@web-01:~$
ssh · ed25519 · port 22
Reconstruction of the interface from the app's own components. A screenshot of the shipping build will replace it.
Migration

Your inventory moves over in one step. No retyping by hand.

Import
  • →mRemoteNG XML configs, with folders and settings
  • →~/.ssh/config as is
Export
  • ←Back to mRemoteNG
  • ←Royal TSX (RoyalJSON)
  • ←Native .tessera bundle, with credentials kept separately under age encryption
$ tessera import mremoteng ~/confCons.xml
$ tessera import openssh ~/.ssh/config
$ tessera export royal --group prod

Coming from mRemoteNG: what imports and what does not

Protocols

Three first-class protocols, not a terminal add-on.

SSHrussh
  • Key, password, or agent
  • ProxyJump through a bastion
  • SFTP file transfer
  • Local, remote, and SOCKS forwarding
  • Host key verification
RDPIronRDP
  • Audio from the remote machine
  • File clipboard
  • Server-side cursor shape
  • GPU rendering without extra copies
VNCvnc-rs
  • A separate process per session
  • Same inventory and tabs
  • No encryption of its own: use an SSH tunnel
Sessions

A workday means dozens of sessions at once, not one.

Tabs and split panes

Several sessions in one window. Split the view into side-by-side panes, each with its own session.

Broadcast input

One typed line goes to every pane in the split at once: the same command on ten hosts.

Folders with inheritance

A folder's settings pass down to its child hosts. Change it in one place, not twenty.

Command palette

Find a host from the keyboard without walking the inventory tree.

Data

Your inventory and secrets stay on your machine.

Secrets

Keychain on macOS, Credential Manager on Windows. The same place your operating system already keeps your passwords.

Fallback store

Where there is no system store, an age-encrypted file.

Inventory

YAML files on disk. Read them, edit them, keep them under version control: plain text, not a locked database.

VNC has no encryption of its own. The app doesn't pretend otherwise: tunnel it over SSH.

Platforms

macOS and Windows are available now. Linux is in development.

macOS

Apple Silicon. Metal, Developer ID signing, and notarization

Windows

x86_64. DirectX 12, embedded HWND, OLE clipboard

Linux

In development. No public build yet.

Download

macOS · Windows

FAQ

Frequently asked questions.

Which platforms does Tessera run on?
macOS (Apple Silicon) and Windows (x86_64, installer or portable zip). There is no Intel Mac build. Linux is in development and has no public build yet.
Which protocols does Tessera support?
SSH (with SFTP, port forwarding, and ProxyJump), RDP, and VNC. There is no Telnet or serial support.
How much does Tessera cost, and is there a free mode?
Free for up to 10 hosts. A license costs 1 599 UAH (≈ $39) per seat, is perpetual, and includes 12 months of updates. Renewal is a new license.
Does Tessera need an account or the cloud?
No. There is no account and no cloud sync. Your inventory lives on your own disk.
Where are passwords and keys stored?
In the OS keychain: Keychain on macOS, Credential Manager on Windows. Where there is no system store, the app keeps an age-encrypted file. The inventory is separate: YAML files on disk, with no secrets in them.
How do I move my connections over from mRemoteNG?
Import confCons.xml in one step; folders and connection settings come across. Passwords are not imported, so you enter them again.
Does Tessera need the internet to verify a license?
No. Licenses are verified offline, using an Ed25519 signature.
Does Tessera collect telemetry?
The app sends one ping a day: install ID, license ID, app version, and OS. In free mode you can turn it off.