Fix the server. Keep the fix.

SSH terminals, files, a live monitor and Kubernetes in one app, on your Mac, your Windows PC or your Linux desktop. An assistant looks into a host beside you, and when the problem is solved, it writes up what was wrong and the exact commands that fixed it.

Download for Mac Windows and Linux See pricing

7 days with everything · macOS 14 Sonoma or later · Windows 10 and 11 · Linux

Wayfinder's window: hosts in coloured groups in the sidebar, an SSH terminal to web-01 with its files beside it, and the host's CPU, memory, network, disks and processes below.

Speaks

SSH and ProxyJump
SFTP
FTP and FTPS
SMB
NFS
WebDAV
Amazon S3 and compatibles
Kubernetes and OpenShift
Telnet and serial

Debug sessions

The fix, written down while it is fresh.

Press record and solve the problem the way you always do, in as many terminals as it takes, with or without the assistant. When you stop, the model reads what was typed, printed and run, and writes it up.

Record

Shell › Start Debug Session (⌥⌘R, or CtrlShiftR on Windows and Linux), or the button in the assistant's panel. Every terminal and the assistant are kept from then on, on your computer.
Solve it

Work across hosts as you like. Ask the assistant along the way: it knows what you already tried in every tab, so it does not suggest it again.
Keep it

Problem, cause, fix, the commands that fixed it, caveats and prevention. Copy it into the ticket or the wiki as Markdown, or keep the commands as a snippet for next time.

nginx on web-01 would not start after the upgrade

31 October 2026, 10:42 to 10:58 · web-01, db-01 · Solved

Problem: After the package upgrade, nginx failed to start: bind() to 0.0.0.0:80 failed (98: Address already in use), and the shop answered 502.
Cause: The upgrade pulled in apache2 as a dependency, and its service started first and took port 80.
Fix: Stopped and disabled apache2, then started nginx, which came up and served the shop again.
Commands that fixed it: # web-01: free port 80 systemctl disable --now apache2 # web-01: start the web server again systemctl start nginx
Prevention: Hold apache2 back on the web servers (apt-mark hold apache2), and alert on a failed nginx unit, not only on the 502.

An example write-up, as the Debug Sessions window shows it.

From what was actually run, in every terminal and by the assistant, not from memory afterwards.
On your computer until you ask. Then only to the model you chose, without what looks like a password, token or key.
One request per write-up, with repeated output sent once. A cheaper model can be set for write-ups alone.

Ask about a host

Ask the server what is wrong.

Type a question in plain words, such as why the load is high, and an assistant looks into it with commands on the host, then answers with the lines that show it and what to do next.

Reading is all it does by itself. Anything that could change the host waits for your Run, with the reason, and what is hard to take back, such as deleting or restarting, asks twice.
Right-click what went wrong. Choose an error or a log line in the terminal and ask about it, or about the whole screen.
Answers as they are written, and a busy model is asked again rather than giving up.
Your own model: an Anthropic or OpenAI key, a gateway such as LiteLLM, or Ollama on your own network. It is off until you choose one.
Set up in one click: with Ollama on your computer, Wayfinder finds its best model that can run commands and offers it. Otherwise Settings lists the models your provider has.
Secrets stay out: what looks like a password, token or private key is removed before the model sees it.
Light on tokens: long outputs are shortened, what is sent again comes from the provider's cache, and each answer says what it used.

Asked why the checkout is slow, the assistant reads nginx's and PHP-FPM's logs, says PHP-FPM is out of workers, and gives the fix to put at the prompt.

Terminal

One login per host, however many tabs.

Your hosts from ~/.ssh/config sit in a sidebar, in groups you name and colour. Every tab, split, file pane, monitor and tunnel to a host shares one connection, so a password or a security key is asked for once.

On the Mac, the OpenSSH you know. ProxyJump, Include, 1Password and Secretive agents, YubiKeys and Kerberos work exactly as they do in Terminal.
On Windows and Linux, SSH built in, so one login per host holds there too. It reads your ~/.ssh/config, known_hosts, keys and agent: Pageant or Windows' own OpenSSH agent, and SSH_AUTH_SOCK on Linux.
A dropped connection comes back by itself, and waits while the computer is offline.
A production tab looks like one: its group's colour marks the tab and the status bar.
Old network gear that offers only retired algorithms is explained in words, and allowed for that host alone.

A tab split into three terminals on web-01, a command typed once and run in all three, under the orange bar that says how many it reaches.

Desktops

Windows and Linux desktops, in a tab.

Remote Desktop and VNC open beside your terminals, a point to the pixel, and follow the tab as the window changes. Full screen gives the desktop the whole display. Copy, paste and type as you would in Windows App.

Full screen, your way

From the tab, the green button or ⌃⌘F. Save a connection to open full screen every time. The menu bar at the top brings the window back.

One clipboard

Copy on Windows, paste on the Mac, and back. ⌘C, ⌘V and the Edit menu do what Ctrl does there, and ⌘ on its own opens Start.

Your keyboard, as it is

Whatever your Mac's layout, the desktop gets what is printed on its keys: the characters Option makes, accents from dead keys, capitals at any speed.

Back after a sleep

A connection lost to a sleeping Mac or a new network is made again by itself, and your Windows session is still where you left it.

Through a jump host, for a desktop on a network only that host can see. VNC then travels inside SSH.
Encrypted Remote Desktop. TLS and Network Level Authentication, with a new certificate shown with its fingerprint before anything is sent.
Passwords in your keychain, or in Credential Manager or the Secret Service on a PC, remembered when you ask, per connection.
Open in Windows App, when it is on your Mac, for sound, printers, drives and several screens.
On Windows and Linux, Remote Desktop and VNC are drawn in a tab too. Remote Desktop can also open in the system's own client: Remote Desktop Connection, FreeRDP or Remmina.

How to add one, what each setting does, and what differs on Windows and Linux: Remote desktops.

Everything you reach for

Built for the work you actually do.

The tools you used to keep open side by side, in one app, on your Mac or your PC.

Splits that share the login

Split a tab right or down as often as it fits. Each new pane joins the connection at once, and closing the one that logged in leaves the others connected.

Type into many at once

Broadcast what you type to every pane of a tab or every terminal in the window. An orange bar says how many it reaches, and any pane can be left out.

Snippets and runs on many hosts

Keep commands with {{placeholders}} to fill in. Run one on a whole group without opening a terminal, eight hosts at a time, with each host's output kept.

Tunnels in a click

Local, remote and SOCKS forwards with presets for web pages, databases and Redis. They ride the host's connection, stay up with no terminal open, and come back by themselves after a drop.

Workspaces

Save the open tabs and their splits under a name and open them again in one go. The tabs that were open when you quit come back at launch.

Switches and consoles too

Telnet and serial consoles (COM ports on Windows) open in an ordinary terminal tab with splits, broadcast and snippets, next to your Windows and Linux desktops in the same groups.

Graphical programs on your screen

Turn on X11 for a host, and programs you start there, such as virt-manager or Wireshark, open in windows of their own: through XQuartz on the Mac, the desktop's own X server on Linux, or an X server such as VcXsrv or X410 on Windows.

Old switches still connect

When a device offers only algorithms your Mac turns down, Wayfinder says so in words and allows them for that host alone, never for the rest.

Transcripts when you want them

Each terminal's output saved as plain text, readable only by you and kept 90 days. Off until you turn it on, and the status bar shows the file.

Made for the keyboard

Every common task has a shortcut, and on the Mac, Help › Keyboard Shortcuts lists them all. On Windows and Linux they are Ctrl+Shift and Alt+Shift keys, as in Windows Terminal, named in each button's tip, so every Ctrl key the shell uses stays the shell's.

Split right or down: ⌘D⇧⌘D
Broadcast to the tab: ⌥⌘I
Snippets: ⇧⌘P
Ask about the host: ⌘J
Start a debug session: ⌥⌘R
Find in the scrollback: ⌘F

Files

A file transfer app, built in.

The host's files sit beside its terminal and follow the folder your shell is in. Drag between the server and your computer, and the queue takes care of the rest.

The shop's media on web-01 beside a folder on this Mac, three downloads going at once, each with its speed and the time it has left.

Transfers that survive a bad connection. One that is cut off waits and goes on from where it stopped, over SFTP and FTP, checked before it continues.
A clear choice when a file is already there: replace, replace only older files, keep both, or send only new items.
Edit a remote file in your own editor. Every save is uploaded, and never over a change someone made on the server meanwhile.
Compare two folders to see what is only on one side or newer there, and select what needs sending.
Find files anywhere below a folder, by name or a pattern such as *.log, on SFTP, FTP, S3 and shares alike.
Files as root through sudo on the same connection, with a bar that says whose files they are.
Quick Look on the server's files, and on an SSH host compress, extract and folder sizes done by the server's own shell.
A replaced file stays as it was: its owner, group and permissions, and a link stays a link, so the service that reads it still can.

Storage

Buckets, shares and FTP servers, next to your hosts.

Each opens in a tab of its own with your computer's files beside it. Paste an address and the connection fills itself in, and Test Connection tries exactly what opening will.

S3 the way it should be: large files in parts, the right type for every file, dates kept, buckets in any region, and share links that expire.
Every common S3 service, from AWS and Cloudflare R2 to Backblaze B2, Wasabi, Hetzner and your own MinIO.
FTP and FTPS with explicit or implicit TLS, and the server's certificate shown before you trust it.
SMB, NFS and WebDAV mounted by macOS itself, as the Finder does. On Windows, SMB and WebDAV shares are connected through Windows networking; on Linux, through GVfs.

The storage sheet for an S3 bucket on Wasabi: the kinds as tiles, then the provider, endpoint, region and bucket, with the secret key kept in the Keychain.

Monitor

See the host while you work on it.

Under the terminal, the host's system, CPU, memory, network, disks and busiest processes, with half an hour of history. Nothing is installed on the server: a short read-only script runs over the connection you already have.

The monitor strip: the host's system facts, CPU and memory graphs, network rates, disks and the busiest processes.

Linux and macOS hosts, from a Raspberry Pi to a database server.
Only for the tab in front, so a window full of tabs costs your servers nothing.
Never stale without saying so. Numbers that stop coming are dimmed, with the time they are from.
Every command it runs is in the activity log, where you can read it.

Kubernetes and OpenShift

Your clusters, without another tool.

The contexts in your kubeconfig open as cluster tabs: what needs attention and why, each node's load, the latest events, and every workload one click away. Logs, a shell in a pod, port forwards, scaling and YAML edits are all there.

A cluster tab: nodes ready, pods running, a deployment in a crash loop listed under needs attention, and each node's CPU and memory.

Switching

Bring your sessions with you.

Import the sessions you already have, in their folders. A sheet shows everything that comes in before anything is written, and what cannot come along is said, with the reason.

MobaXterm
PuTTY
FileZilla
WinSCP
Cyberduck
ssh_config

Jump hosts, keys and folders come along, and a session already in Wayfinder is never added twice.
On Windows, found for you: Wayfinder offers the MobaXterm, FileZilla and WinSCP files it finds where those apps keep them, and reads PuTTY's sessions straight from the registry.
Passwords stay behind. Those apps keep them encoded, not protected. Wayfinder asks for an SSH password when you connect and keeps it in your keychain, Credential Manager or the Secret Service if you like; an FTP password or S3 key goes in the connection's settings.

Importing FileZilla's sites: SFTP, FTP, FTPS, S3 and WebDAV storage in their folders, shown before anything is written.

Privacy and security

Your servers stay between you and them.

A tool that holds the keys to your infrastructure has to be easy to trust. Wayfinder is built that way.

Your SSH setup, as it is

On the Mac, connections are made by the ssh that ships with macOS. On Windows and Linux, Wayfinder's own SSH reads the same config, known_hosts, keys and agent. Hosts you add go in Wayfinder's own file, never into yours.

Secrets in the system's store

Passwords, FTP logins and S3 secrets stay in the macOS keychain, Windows Credential Manager or the Linux Secret Service of each computer. They never travel with your hosts.

Nothing phones home

No account, no analytics. Crash reports stay on your Mac until you choose to send one. The only question Wayfinder asks VersaMinds is whether there is an update.

Careful with what servers send

A file name from a server can never land outside the folder you chose. On the Mac, downloads are checked by Gatekeeper like anything from the internet; on Windows, a server's file you open is marked as coming from the internet.

Reviewing Wayfinder for your company? The security page says where everything is kept and what Wayfinder does by itself.

Pricing

Pay once, or by the month.

Try every feature free for 7 days. Pay once and the version you have is yours for good, with a year of updates. Or subscribe for every update, and stop whenever you like.

Wayfinder

For one person, on all their own computers.

€59once

Every feature
Mac, Windows and Linux
Yours to keep
A year of updates

Buy Wayfinder

Monthly

For one person, for as long as they need it.

€2.99a month

Every feature
Mac, Windows and Linux
Every update while it runs
Cancel whenever you like

For a team

A licence for each person, in one order.

€59per person, once, or €2.99 a month each

As many people as you need
One invoice, with your VAT number
Twenty or more: ask for a quote

Buy for a Team

Prices include VAT; the checkout works it out for your country and VAT number. Orders are handled by our reseller Paddle, the merchant of record, which takes the payment and sends the invoice. The monthly plan renews each month until you cancel it, in the app or through Paddle's receipt, and works to the end of the month paid for. Not for you after all? Your money back within 14 days: see the refund policy and the terms of sale.

Platforms

On your Mac, your PC and your Linux desktop.

The same app on all three: terminals, files, tunnels, remote desktops, clusters, the monitor, the assistant and debug sessions. Each is free to try for 7 days.

Mac Available

macOS 14 Sonoma or later, on Apple silicon and Intel. Native, signed and notarised.

Download for Mac

Windows Available

Windows 10 and 11, on x64 and ARM64 PCs. A setup program for one person, or an MSI for deploying to many.

Download for Windows

Linux Available

x64 and ARM64 desktops, with WebKitGTK. A .deb for Debian and Ubuntu, an .rpm for Fedora and its relatives, an AppImage for the rest.

AppImage for x64

Your hosts move with you. hosts.conf and library.json are the same files on the Mac and the PC, so copying them across brings your hosts, groups, snippets and tunnels along. Passwords stay in each computer's own store.
Not code-signed yet on Windows and Linux. Windows may warn before the setup program first runs: choose More info, then Run anyway. The Mac version is signed and notarised.
On the Mac only, for now: keeping your hosts in iCloud Drive.

Questions

Good to know.

How does the free trial work?

Download Wayfinder and use every feature for 7 days, with no account and no card. When the trial ends, enter a licence to keep going. Your hosts, groups and snippets stay where they are.

What happens after the year of updates?

Wayfinder keeps working, for good. You keep every update released in your year, and newer versions are simply not offered. Renew for another year of updates whenever you want them. A licence bought once never renews by itself.

How does the monthly plan work?

You get every feature and every update for as long as it runs. Wayfinder fetches each month's licence by itself, so you enter it once. Cancel in Settings › Licence › Manage Subscription, or through the link in Paddle's receipt: it keeps working to the end of the month you paid for, then asks for a licence again. Your hosts and settings stay where they are.

Does it replace MobaXterm, Royal TSX or Termius?

For most people, yes: terminals, file transfers, tunnels, a host monitor, Remote Desktop and VNC, X11 windows and saved sessions in groups, in one app, on the Mac, Windows or Linux. Wayfinder imports MobaXterm, PuTTY, FileZilla, WinSCP and Cyberduck sessions, so trying it costs a minute.

Can I work on Windows PCs and Linux desktops?

Yes. Remote Desktop and VNC open in a tab, or full screen, with the clipboard shared both ways and your Mac's keyboard as it is. A desktop on a private network is reached through one of your SSH hosts. Microsoft's Windows App is still there for sound, printers and several screens: Wayfinder opens the same desktop in it when it is installed. On Windows and Linux, the same desktops are drawn in a tab or full screen, with the clipboard's text shared both ways, or opened in Remote Desktop Connection, FreeRDP or Remmina.

Which computers does it run on?

Any Mac with macOS 14 Sonoma or later, with Apple silicon or an Intel processor. PCs with Windows 10 or 11, on x64 or ARM64. Linux desktops on x64 or ARM64 with WebKitGTK, which the .deb and .rpm packages install for you.

Does it change my ~/.ssh/config?

No. Hosts you add in Wayfinder go in its own file. ssh is given a small configuration that reads Wayfinder's hosts, then yours, then the system's, so your own file stays as you wrote it. Only if you choose Use These Hosts in Every Terminal does Wayfinder add one Include line to it, so ssh in any terminal knows them too. On Windows and Linux it never does: Wayfinder's own SSH reads its hosts, then yours, and leaves your file as it is.

Can my hosts sync between my computers?

Between Macs, yes, through iCloud Drive, with your groups, snippets and workspaces. Passwords and secrets stay in each Mac's keychain. Windows and Linux have no sync of their own yet, but the files are the same everywhere: copy hosts.conf and library.json from one computer to another and your hosts come along.

What does a debug session keep, and where?

From when you start it until you end it: what every terminal printed and what was typed in it, the assistant's questions, commands and answers, and what Wayfinder ran for a button. It stays in a folder on your computer, readable only by you, until you delete it. Nothing is sent until you ask for the write-up, and then only to the model you chose, without what looks like a password, token or key.

What does the assistant cost to run?

Nothing extra from us: it is part of Wayfinder. Your model's provider bills you for what it reads and writes, and every answer and write-up says how many tokens it used. With Ollama on your own network it costs nothing at all.

Does the assistant send my servers' data anywhere?

Only to the model you choose, and only when you ask a question. Settings lists everything it is sent. With Ollama on your own network, nothing leaves it.

Are the Windows and Linux installers signed?

Not yet. The Mac version is signed with VersaMinds' Developer ID and notarised by Apple. The Windows and Linux installers are not code-signed yet, so Windows may warn before the setup program first runs, and a company that allows only signed software may block it until they are.

Can I get a refund?

Yes. If Wayfinder is not for you, ask within 14 days of buying, through the link in Paddle's receipt or by writing to info@versaminds.live, and you get your money back. No reason needed. The refund policy has the details.

Find your way to every server.

Try Wayfinder free for 7 days, with every feature, the assistant and debug sessions included.