Termius vs Tailscale
Termius wins · 11–6 (9 drawn)
Agenticness — how well agents can access and operate the productAgenticness
How well agents can access and operate the product
Agent access
ai-native userPoint an agent at llms.txt or agent-oriented docs
weight 2 · round to TermiusA probe confirms docs.termius.com/llms.txt returns HTTP 200 with structured documentation links, meaning an agent can be pointed directly at an llms.txt file. Missing for 10: no first-party announcement or documentation explicitly describing/promoting the llms.txt file as an agent-facing feature, and no independent corroboration of its completeness or maintenance.
- [probe] “PROBE llms.txt: HTTP 200 at https://docs.termius.com/llms.txt # termius.docs ## Documentation - [What is Termius](https://docs.termius.com…”
ai-native userUse an official CLI
weight 2 · round to TailscaleTermiusnone0/10The evidence pack covers Termius's GUI features (snippets, workspaces, port forwarding, AI command generation) but contains no mention of an official standalone CLI tool for scripting/automation outside the app; the probe for OpenAPI/API surface also returned 404s, suggesting no documented CLI/API surface.
- [probe] “PROBE openapi: all candidate paths 404 (https://docs.termius.com/openapi.json, https://docs.termius.com/swagger.json, https://docs.termius.c…”
Tailscale documents an official CLI reference (tailscale-probe-3), confirming the capability exists, but the evidence pack lacks detail on CLI features, scripting/automation support for AI-agent workflows, or independent corroboration of its use in agentic contexts. Missing for 10: detailed CLI command documentation, AI-agent-specific automation examples, and independent hands-on validation of CLI robustness.
- [probe] “official CLI documented at https://tailscale.com/docs/reference/tailscale-cli”
ai-native userDrive the product through a documented public API
weight 3 · round to TailscaleTermiusnone0/10No evidence of a documented public API for driving Termius programmatically; OpenAPI probes all returned 404, and docs focus on UI/CLI features like snippets, AI command generation, and sync rather than an API for external agent control.
- [probe] “PROBE openapi: all candidate paths 404 (https://docs.termius.com/openapi.json, https://docs.termius.com/swagger.json, https://docs.termius.c…”
- [probe] “PROBE llms.txt: HTTP 200 at https://docs.termius.com/llms.txt # termius.docs ## Documentation - [What is Termius](https://docs.termius.com…”
Evidence only vaguely references automating tailnets via 'infrastructure-as-code providers, webhooks, and other integrations' and a documented CLI, but probes explicitly failed to find an OpenAPI/swagger spec or llms.txt, giving no concrete confirmation of a documented public REST API surface in this pack. Missing for 10: explicit API reference docs, endpoint list, authentication scheme details, and independent corroboration of API usage by AI/automation tools.
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
- [probe] “PROBE openapi: all candidate paths 404 (https://tailscale.com/openapi.json, https://tailscale.com/swagger.json, https://tailscale.com/api/op…”
- [probe] “official CLI documented at https://tailscale.com/docs/reference/tailscale-cli”
ai-native userBuild against official SDKs
weight 2 · round drawnTermiusnone0/10No evidence of any official SDK for developers to build against; Termius is an SSH client with AI-generated command features, not a platform offering SDKs, and the openapi probe returned 404s with no SDK docs found.
- [probe] “PROBE openapi: all candidate paths 404 (https://docs.termius.com/openapi.json, https://docs.termius.com/swagger.json, https://docs.termius.c…”
- [claimed-docs] “Termius can convert a plain-language description into a shell command... Termius generates the command using AI.”
Tailscalenone0/10Evidence shows only infra-as-code/webhook integrations and a CLI reference, with no mention of official SDKs; probes explicitly show the OpenAPI spec and llms.txt endpoints returning 404, indicating no discoverable machine-readable API/SDK surface for AI-native builders.
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
- [probe] “PROBE llms.txt: HTTP 404 at https://tailscale.com/llms.txt”
- [probe] “PROBE openapi: all candidate paths 404 (https://tailscale.com/openapi.json, https://tailscale.com/swagger.json, https://tailscale.com/api/op…”
- [probe] “official CLI documented at https://tailscale.com/docs/reference/tailscale-cli”
Agentic features
ai-native userSet up automations that run autonomously in the background
weight 2 · round to TailscaleTermiusnone0/10Termius offers snippets, broadcast commands, and workspace templates that are user-triggered, but there is no evidence of scheduling, triggers, or autonomous background execution without a user actively running them.
Tailscale documents API/webhook and infrastructure-as-code automation for managing a tailnet (tailscale-docs-12), which could be used to script background automations, but there is no evidence of AI-agent-specific, autonomous background automation capabilities or examples of such use. Missing for 10: dedicated agent/automation framework, evidence of autonomous (not just scriptable) background operation, and any AI-native tooling or examples beyond a single generic automation mention.
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
ai-native userOperate the product with natural-language commands
weight 2 · round to TermiusTermius docs explicitly describe an AI feature that converts plain-language descriptions into shell commands (termius-docs-6), directly supporting natural-language command operation. However, this appears limited to command generation within the terminal rather than broader natural-language control of the app (e.g., navigating hosts, managing vaults, or automating workflows via NL), and there's no independent/community corroboration of this AI feature's real-world reliability. Missing for 10: broader NL control beyond command generation, hands-on/community validation of the AI feature, and details on accuracy/limitations.
- [claimed-docs] “Termius can convert a plain-language description into a shell command... Termius generates the command using AI.”
Tailscalenone0/10No evidence Tailscale offers any natural-language command interface, chatbot, or AI assistant control layer; it exposes a traditional CLI and admin console. Probes even show absence of llms.txt/OpenAPI discovery aids. Missing for 10: any NL command parsing, AI assistant integration, or documented conversational interface.
- [probe] “PROBE llms.txt: HTTP 404 at https://tailscale.com/llms.txt”
- [probe] “PROBE openapi: all candidate paths 404 (https://tailscale.com/openapi.json, https://tailscale.com/swagger.json, https://tailscale.com/api/op…”
- [probe] “official CLI documented at https://tailscale.com/docs/reference/tailscale-cli”
Api quality
ai-native userExplore an interactive API reference with runnable examples
weight 2 · round drawnTermiusnone0/10Termius is an SSH client, not an API product; no evidence of an interactive API reference or runnable examples exists, and the OpenAPI probe explicitly returned 404s at all candidate paths. There is no documented API playground or reference in the evidence pack.
- [probe] “PROBE openapi: all candidate paths 404 (https://docs.termius.com/openapi.json, https://docs.termius.com/swagger.json, https://docs.termius.c…”
Tailscalenone0/10No evidence of an interactive API reference or runnable examples; probes for OpenAPI/swagger specs returned 404s, and there's no mention of an interactive API explorer in the docs pack.
- [probe] “PROBE openapi: all candidate paths 404 (https://tailscale.com/openapi.json, https://tailscale.com/swagger.json, https://tailscale.com/api/op…”
ai-native userDownload a machine-readable API spec (OpenAPI or equivalent)
weight 2 · round drawnTermiusnone0/10A probe explicitly checked for OpenAPI/Swagger spec files at common paths and all returned 404, and no other evidence mentions a machine-readable API spec being available for download.
- [probe] “PROBE openapi: all candidate paths 404 (https://docs.termius.com/openapi.json, https://docs.termius.com/swagger.json, https://docs.termius.c…”
Tailscalenone0/10Tailscale does have a documented REST API, but the evidence pack shows explicit probe failures for OpenAPI/Swagger spec endpoints at all candidate URLs, with no machine-readable spec found. missing for 10: a downloadable OpenAPI/Swagger JSON or YAML spec, any documentation page linking to such a spec.
ai-native userRely on versioned APIs with a documented deprecation policy
weight 2 · round drawnTermiusnone0/10Termius is an SSH client focused on terminal/session management; there is no evidence of a public versioned API or documented deprecation policy. The openapi probe returned 404 for all candidate paths, confirming absence of API documentation.
- [probe] “PROBE openapi: all candidate paths 404 (https://docs.termius.com/openapi.json, https://docs.termius.com/swagger.json, https://docs.termius.c…”
Tailscalenone0/10No evidence of API versioning documentation or a deprecation policy; probes for OpenAPI/spec files returned 404s and no docs mention API version lifecycle. missing for 10: documented API versioning scheme, deprecation policy, changelog for breaking changes.
- [probe] “PROBE openapi: all candidate paths 404 (https://tailscale.com/openapi.json, https://tailscale.com/swagger.json, https://tailscale.com/api/op…”
Automation depth — how much of the product can run unattendedAutomation depth
How much of the product can run unattended
ai-native userPerform bulk operations across many items at once
weight 2 · round to TermiusTermius provides multiple documented bulk-operation mechanisms: broadcasting commands to all sessions simultaneously and saving as reusable workspace templates, executing snippets on multiple hosts at once, and CSV bulk-import of hosts/groups/credentials. These directly satisfy 'bulk operations across many items.' Missing for 10: independent/hands-on corroboration specifically validating broadcast-to-many-hosts at scale (community evidence only touches snippet scripting, not the broadcast/bulk-import features) and evidence of bulk operations on other item types like credentials or vault entries.
- [claimed-docs] “You can broadcast a command to all sessions simultaneously and save the entire setup as a reusable template.”
- [claimed-docs] “execute them on multiple hosts at once from the Snippets screen”
- [claimed-docs] “Termius can import hosts from a CSV file, including labels, IP addresses, protocols, ports, groups, subgroups, tags, and credentials.”
- [claimed-docs] “Workspaces group multiple terminal sessions into one focused environment... Broadcast the same input to multiple sessions”
- [claimed-docs] “Workspace templates capture: Included connections, Tab names, Layout configuration, Working directories, Running commands at the time of sav…”
- [community] “Combination of Termius's saved snippets and short shell scripts let me do monitoring without running a separate web-server behind auth. Easi…”
Tailscale exposes a CLI and supports infrastructure-as-code/webhook automation of a tailnet, which implies a user could script bulk changes across many devices, but there is no concrete documentation or example of a native bulk-operations feature (e.g., batch tagging, mass key rotation, multi-device ACL updates) or API endpoint for bulk actions. missing for 10: explicit bulk-operation API/CLI examples, evidence of batch device/user management, independent confirmation of scripted bulk workflows.
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
- [probe] “official CLI documented at https://tailscale.com/docs/reference/tailscale-cli”
ai-native userDefine rules that trigger actions automatically on events
weight 3 · round to TailscaleTermiusnone0/10Termius evidence covers saved connections, jump-host auto-routing, snippets/broadcast commands, and AI command generation, but none of this describes user-defined rules that trigger actions automatically on events (e.g., on-connect/on-disconnect triggers, webhooks, conditional automations). Jump-host auto-connect is a static config, not an event-rule engine, and no evidence pack item describes any such automation system.
- [claimed-docs] “if you configure a jump host for a Group, every Host within it will automatically connect through that jump host”
- [claimed-docs] “You can broadcast a command to all sessions simultaneously and save the entire setup as a reusable template.”
- [claimed-docs] “execute them on multiple hosts at once from the Snippets screen”
- [claimed-docs] “Termius can convert a plain-language description into a shell command... Termius generates the command using AI.”
Tailscale documents webhooks and infrastructure-as-code integrations for automating tailnet events, which could be used to trigger external actions on network changes, but there is no evidence of a built-in rules engine for defining conditional automation logic tied to arbitrary events. Missing for 10: documented rule/condition syntax, examples of event-triggered automations, and independent confirmation of this capability being used for automation workflows.
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
Networking access — stories about networking access in this arenaNetworking access
Stories about networking access in this arena
Mesh network
power-userConnect directly to my servers without relying on a cloud relay, proxy, or VPN
weight 2 · round to TermiusTermius explicitly documents local-first, direct SSH connections without cloud dependency: "Termius doesn't depend on the cloud to manage your access... Connect directly to your servers without the internet, a proxy, or VPN," backed by locally encrypted infrastructure storage. Community evidence corroborates real direct SSH usage in the field (debugging via SSH from mobile), though no independent technical audit verifies the no-relay claim. Missing for 10: independent/hands-on verification of the no-relay architecture claim, and details on how sync (which does use Termius cloud) is kept separate from the direct connection path.
- [claimed-docs] “Termius doesn't depend on the cloud to manage your access. Your infrastructure is stored and encrypted locally. Connect directly to your ser…”
- [claimed-docs] “Every account includes a Personal vault, accessible only to you and synced across all your devices.”
- [community] “Saved my butt once when my docker containers were bouncing while on vacation—debugged and deployed a fix from my iPhone while my wife drove.…”
- [community] “Wow, this app saved my butt over a year ago when I ran out of laptop battery in the field.”
Tailscaledisputedcontradicted6/10Tailscale's mesh overlay and WireGuard-based architecture is documented to establish direct peer-to-peer connections for SSH, Kubernetes, NAS, and subnet access (tailscale-docs-1,5,6,9; tailscale-comm-1,7,8), and users report direct SSH/file access 'like I'm home' (tailscale-docs-7,8). However, hands-on community reports concretely contradict the 'no relay' claim: NAT traversal 'doesn't always work, sometimes I get connected to a DERP server, so that limits network speeds' (tailscale-comm-10), meaning cloud relay fallback is a real, documented occurrence rather than a hypothetical. Missing for 10: first-party acknowledgment/quantification of DERP relay fallback frequency, and independent benchmarking of direct-vs-relayed connection rates.
- [claimed-docs] “Infrastructure access to wherever your resources live, including Kubernetes clusters”
- [claimed-docs] “Across clouds or on-prem, Tailscale’s mesh overlay network connects it all.”
- [claimed-docs] “Auditable access to SSH, K8s, databases, and more.”
- [claimed-docs] “just SSH'ed into my boxes, building code and pushing configs around like I'm home”
- [claimed-docs] “I now can manage my home NAS and my home k8s cluster…from my phone!”
- [community] “Tailscale is my favorite (product) discovery of 2022... SSH'ing into a raspberry pi, accessing dev servers from other devices, giving access…”
- [community] “If you have more complex cases, the IPTables/Netfilter rules make it vastly more difficult to manage... They've also broken features I relie…”
developerGet secure infrastructure access to resources wherever they live, including Kubernetes clusters
weight 3 · round to TailscaleTermiusnone0/10Termius's evidence pack covers SSH/host management, port forwarding, vaults, snippets, and file transfer, but there is no mention anywhere of Kubernetes clusters, kubectl integration, or container-orchestration access—this is a specific capability that is entirely unevidenced.
First-party docs explicitly claim infrastructure access 'wherever your resources live, including Kubernetes clusters,' with auditable SSH/K8s/database access, subnet routers, and infra-as-code integrations, and community testimonials corroborate managing home k8s clusters and SSH access remotely. Missing for 10: independent hands-on validation specifically of Kubernetes access (only a generic homelab testimonial), and no detailed K8s-operator documentation excerpt beyond marketing claims.
- [claimed-docs] “Infrastructure access to wherever your resources live, including Kubernetes clusters”
- [claimed-docs] “Auditable access to SSH, K8s, databases, and more.”
- [claimed-docs] “I now can manage my home NAS and my home k8s cluster…from my phone!”
- [claimed-docs] “Use subnet routers to give devices outside your local network access to services within specific subnets.”
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
- [community] “Tailscale is my favorite (product) discovery of 2022... SSH'ing into a raspberry pi, accessing dev servers from other devices, giving access…”
Offline sync — stories about offline sync in this arenaOffline sync
Stories about offline sync in this arena
Cross device sync
power-userSync my saved hosts and connection settings across all my devices
weight 2 · round to TermiusTermius documents a Personal vault synced across all devices, automatic sync of vaults/hosts/configurations on login, and cross-device access to hosts, keys, groups, snippets, and port-forwarding rules; community evidence corroborates cross-device usage (e.g., debugging from iPhone). Missing for 10: independent verification of sync reliability/conflict handling and no detailed technical explanation of sync mechanism/security internals.
- [claimed-docs] “Every account includes a Personal vault, accessible only to you and synced across all your devices.”
- [claimed-docs] “Log in to your account — your Vaults, hosts, and configurations will be synced automatically.”
- [claimed-docs] “Termius transforms this process with team vaults. Vaults serve as a single source of truth for Hosts, Groups, Snippets, Port Forwarding rule…”
- [claimed-docs] “Items in the Keychain can be referenced by multiple Hosts and Groups without duplicating them.”
- [community] “Saved my butt once when my docker containers were bouncing while on vacation—debugged and deployed a fix from my iPhone while my wife drove.…”
- [community] “I love using Termius on my 12.9” iPad Pro with keyboard—full screen terminal with extra features that pop up right when needed.”
Tailscale's mesh network model means every device on a tailnet automatically sees the same peer/device list (hosts) via the coordination server, and docs describe it as cross-platform and infrastructure agnostic, which implies your network of devices is consistent everywhere. However, there is no explicit evidence of syncing individual 'connection settings' (e.g., exit-node choice, per-device preferences, saved shortcuts) across devices beyond the shared tailnet device list. Missing for 10: documentation of settings/preference sync (not just device visibility), independent confirmation that user-level configs carry across devices, and any UI showing 'saved hosts' as a discrete synced feature.
- [claimed-docs] “Cross-platform and infrastructure agnostic to give the flexibility you need.”
- [claimed-docs] “Across clouds or on-prem, Tailscale’s mesh overlay network connects it all.”
- [claimed-docs] “Use subnet routers to give devices outside your local network access to services within specific subnets.”
Openness — open source, data portability, and self-hosting storiesOpenness
Open source, data portability, and self-hosting stories
ai-native userDo everything through the API that I can do in the UI
weight 2 · round to TailscaleTermiusnone0/10No evidence of a public API exposing Termius's core UI capabilities (hosts, snippets, vaults, workspaces) programmatically; probes for an OpenAPI spec all returned 404, and no documentation describes an API at all.
- [probe] “PROBE openapi: all candidate paths 404 (https://docs.termius.com/openapi.json, https://docs.termius.com/swagger.json, https://docs.termius.c…”
Docs mention automating a tailnet via infrastructure-as-code, webhooks, and other integrations, and a CLI reference exists, implying some API/CLI parity with the admin console, but there is no explicit claim or evidence that every UI action (e.g., user management, subnet routing, ACL editing) is fully exposed via API, and probes found no discoverable OpenAPI spec. Missing for 10: explicit API/UI feature-parity documentation, a discoverable OpenAPI/API reference, and independent confirmation that admin console actions map 1:1 to API calls.
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
- [claimed-docs] “See how to invite users, assign or change user roles, remove users, and quickly switch between accounts.”
- [probe] “PROBE openapi: all candidate paths 404 (https://tailscale.com/openapi.json, https://tailscale.com/swagger.json, https://tailscale.com/api/op…”
- [probe] “official CLI documented at https://tailscale.com/docs/reference/tailscale-cli”
ai-native userRead the product's source under an open license
weight 2 · round drawnTermiusnone0/10Termius is closed-source; there's no evidence of an open license or public source repository, and community feedback (termius-comm-4) explicitly notes concerns about it being closed-source with no visibility into crypto implementation.
- [community] “I'm usually wary of using closed-source programs for sensitive tasks like SSH. I haven't found details on the crypto libraries used or secur…”
Tailscalenone0/10No evidence in the pack shows Tailscale publishing its source under an open license; on the contrary, a community comment explicitly describes Tailscale's control/coordination server as 'closed source' (tailscale-comm-19), and no docs or repos are cited to counter this.
- [community] “we're all meant to be happy giving full control of our entire network to a commercial company running a closed source command and control se…”
ai-native userSelf-host the core product
weight 3 · round drawnTermiusnone0/10Termius is presented as a cloud-synced SSH client with Personal/Team vaults and sync services (termius-docs-8, termius-docs-9, termius-docs-29); there is no mention of any self-hosted server/backend option or on-prem deployment for the core product. termius-docs-15 only notes local caching of credentials for offline connect, not a self-hosted core service. Missing for 10: any documented self-hosted/on-prem deployment option, self-hosting instructions, or enterprise self-managed sync server.
- [claimed-docs] “Every account includes a Personal vault, accessible only to you and synced across all your devices.”
- [claimed-docs] “When you add team members, a Team vault is created automatically. This vault is shared with all team members, allowing your team to manage i…”
- [claimed-docs] “Termius doesn't depend on the cloud to manage your access. Your infrastructure is stored and encrypted locally. Connect directly to your ser…”
- [claimed-docs] “Log in to your account — your Vaults, hosts, and configurations will be synced automatically.”
Tailscalenone0/10No vendor documentation claims a self-hostable control server; multiple independent community comments explicitly note Tailscale's coordination/control server is closed-source and cannot be self-hosted, with users citing this as a trust/lock-in concern.
- [community] “Am I the only one that has an issue with a VPN that I can't self host? Presumably if Tailscale get's PWN'd or subpoenaed then your network i…”
- [community] “we're all meant to be happy giving full control of our entire network to a commercial company running a closed source command and control se…”
- [community] “As soon as Tailscale provides option for Wireguard preshared keys, I will use it. I need Tailscale out of my network... Self hosting Tailsca…”
Privacy posture — data-handling and privacy storiesPrivacy posture
Data-handling and privacy stories
ai-native userChoose where my data is stored (region/residency)
weight 2 · round drawnTermiusnone0/10No evidence Termius offers any data residency or region-selection controls for where vault/host data is stored; docs only describe local encryption and sync to Termius' cloud without regional choice options.
Tailscalenone0/10Tailscale is a mesh VPN/networking product; the evidence pack contains nothing about choosing a data storage region or data residency controls for user data/AI content. This is a plausible axis for privacy-conscious SaaS-style products, but there is no documentation of regional data storage or residency options, so it is 'none' rather than 'na'.
ai-native userControl data retention and deletion
weight 2 · round drawnTermiusnone0/10Termius documents where data lives (Personal/Team vaults, local encrypted storage, synced session logs) but provides no evidence of user-facing controls for setting retention periods, purging logs, or deleting synced/vault data on demand.
- [claimed-docs] “Termius automatically collects terminal session logs for every host. Logs are synced across devices and shared with your team. You can searc…”
- [claimed-docs] “Every account includes a Personal vault, accessible only to you and synced across all your devices.”
- [claimed-docs] “When you add team members, a Team vault is created automatically. This vault is shared with all team members, allowing your team to manage i…”
- [claimed-docs] “Termius doesn't depend on the cloud to manage your access. Your infrastructure is stored and encrypted locally. Connect directly to your ser…”
- [claimed-docs] “Session logs are a record of your terminal activity. They help you review past work, troubleshoot issues, and collaborate with teammates.”
ai-native userOpt out of telemetry and usage tracking
weight 2 · round drawnTermiusnone0/10No evidence pack item mentions telemetry, usage tracking, analytics opt-out, or any privacy/data-collection settings controllable by the user; documentation focuses on features (sync, keychain, SSH keys) not telemetry controls.
Tailscalenone0/10The evidence pack contains no documentation or community mention of a telemetry/usage-tracking opt-out setting for Tailscale; only unrelated product marketing, feature docs, and general community trust/security discussions are present. This is a fair question for a network/VPN product, but no capability is evidenced.
Security — security posture and hardening storiesSecurity
Security posture and hardening stories
Credential protection
developerProtect my remote connections with biometric authentication like Face ID or fingerprint
weight 2 · round to TermiusTermius docs explicitly claim biometric protection via Windows Hello, Touch ID/Face ID, and Android biometrics tied to device-bound keys, directly matching the story. Missing for 10: independent/hands-on corroboration of biometric unlock in practice and details on implementation robustness across platforms.
- [claimed-docs] “Secure connections with device-bound keys and biometric protection with Windows Hello, Touch ID/Face ID, or Android biometrics.”
- [claimed-docs] “Secure SSH authentication with FIDO2 security keys and MFA.”
Terminal ssh — terminal and SSH workflows — shells, sessions, remote accessTerminal ssh
Terminal and SSH workflows — shells, sessions, remote access
Ssh connections
developerTransfer files to and from remote hosts via scp and sftp using my configured keys
weight 2 · round to TermiusTermius documents SFTP file transfer with a dual-pane interface and one-click switching between terminal and SFTP sessions on the same host, using the same configured Hosts/Keychain credentials, plus a keychain for SSH key management with passphrase protection referenced across connections. This directly covers scp/sftp-style file transfer using configured keys. Missing for 10: explicit mention of the `scp` command/protocol specifically (only SFTP is named) and independent hands-on corroboration of file-transfer reliability.
- [claimed-docs] “Dual-pane interface on the desktop: manage local or remote files side-by-side”
- [claimed-docs] “Integrated workflow: switch between a terminal session and an SFTP session for the same host with a single click”
- [claimed-docs] “Create and manage your SSH keys with passphrase protection. Everything is encrypted and easily accessible from any device.”
- [claimed-docs] “Items in the Keychain can be referenced by multiple Hosts and Groups without duplicating them.”
Tailscale provides standard IP connectivity between devices so any TCP-based tool including scp/sftp over SSH should work using normal SSH keys, and evidence confirms SSH access to boxes (tailscale-docs-6, tailscale-docs-7, tailscale-comm-1). However, there is no explicit mention of scp/sftp usage, and community reports specifically flag file-transfer performance overhead as a real drawback (tailscale-comm-7), which is directly relevant to this story's file-transfer use case. Missing for 10: explicit scp/sftp documentation or examples, confirmation that key-based auth flows unchanged, and resolution of the noted file-transfer performance complaints.
- [claimed-docs] “Auditable access to SSH, K8s, databases, and more.”
- [claimed-docs] “just SSH'ed into my boxes, building code and pushing configs around like I'm home”
- [community] “Tailscale is my favorite (product) discovery of 2022... SSH'ing into a raspberry pi, accessing dev servers from other devices, giving access…”
- [community] “I love tailscale, but the performance overhead on file transfer (my primary use case for it) is very real. Samba transfers take a 15 megabyt…”
power-userKeep my terminal session alive across network changes and device sleep
weight 3 · round to TermiusA single community comment confirms Termius supports Mosh, which enables sessions to survive network changes, and another notes remote debugging while mobile, suggesting some resilience to connectivity drops. However there is no first-party documentation describing session persistence across network changes or device sleep, and no evidence addressing behavior specifically during device sleep. missing for 10: first-party docs on Mosh/session-persistence feature, explicit device-sleep resilience evidence, independent verification beyond one HN comment.
- [community] “Saved my butt once when my docker containers were bouncing while on vacation—debugged and deployed a fix from my iPhone while my wife drove.…”
- [community] “Wow, this app saved my butt over a year ago when I ran out of laptop battery in the field.”
Evidence shows Tailscale is commonly used to SSH into always-reachable devices (docs-7, comm-1) via a stable mesh network, which implies some resilience, but there is no explicit evidence that an active terminal session survives network changes or device sleep (e.g., no mosh-like session persistence claim). Community reports also note connectivity breakage from ISPs/guest wifi blocking Tailscale ports and NAT traversal failures (comm-11, comm-10), casting doubt on seamless roaming. missing for 10: explicit documentation or hands-on test of session persistence across network/device changes, confirmation of roaming behavior during sleep/wake cycles.
- [claimed-docs] “just SSH'ed into my boxes, building code and pushing configs around like I'm home”
- [community] “Tailscale is my favorite (product) discovery of 2022... SSH'ing into a raspberry pi, accessing dev servers from other devices, giving access…”
- [community] “Tailscale is becoming less useful as network providers become hostile to it. Last week I noticed McDonalds guest wifi is blocking new connec…”
- [community] “If you have more complex cases, the IPTables/Netfilter rules make it vastly more difficult to manage... They've also broken features I relie…”
developerConnect to remote servers using SSH with Ed25519, ECDSA, or RSA keys
weight 3 · round to TermiusTermius docs explicitly confirm it can generate Ed25519, ECDSA, RSA (and ML-DSA) keys with passphrase protection, and supports importing existing ~/.ssh keys and configs for connecting to remote servers via SSH. Community evidence corroborates real-world SSH usage as a core client function. Missing for 10: independent hands-on verification specifically testing each key type's SSH connection success.
- [claimed-docs] “Termius can generate Ed25519, ECDSA, RSA, and ML-DSA keys.”
- [claimed-docs] “Create and manage your SSH keys with passphrase protection. Everything is encrypted and easily accessible from any device.”
- [claimed-docs] “Termius supports importing the contents of the `~/.ssh` folder, including `ssh_config`, `known_hosts`, and key files”
- [community] “Combination of Termius's saved snippets and short shell scripts let me do monitoring without running a separate web-server behind auth. Easi…”
- [community] “Saved my butt once when my docker containers were bouncing while on vacation—debugged and deployed a fix from my iPhone while my wife drove.…”
Evidence confirms Tailscale is commonly used to SSH into remote machines (docs-6, docs-7, comm-1), since it provides an encrypted network layer that carries ordinary SSH traffic, but there is no evidence addressing support for specific SSH key types (Ed25519, ECDSA, RSA) — this is typically handled by the standard OS SSH client, not Tailscale itself. Missing for 10: explicit documentation of key-type support, Tailscale SSH feature's key handling specifics, and independent confirmation of standard-key SSH working over Tailscale.
- [claimed-docs] “Auditable access to SSH, K8s, databases, and more.”
- [claimed-docs] “just SSH'ed into my boxes, building code and pushing configs around like I'm home”
- [community] “Tailscale is my favorite (product) discovery of 2022... SSH'ing into a raspberry pi, accessing dev servers from other devices, giving access…”
power-userGenerate SSH key pairs for password-less access to my servers
weight 2 · round to TermiusTermius docs explicitly confirm SSH key pair generation (Ed25519, ECDSA, RSA, ML-DSA) with passphrase protection, encrypted storage, and cross-device sync/keychain reuse across hosts for password-less auth. Missing for 10: independent hands-on verification of the key-generation workflow itself (community evidence covers other features but not this specific one).
- [claimed-docs] “Create and manage your SSH keys with passphrase protection. Everything is encrypted and easily accessible from any device.”
- [claimed-docs] “Termius can generate Ed25519, ECDSA, RSA, and ML-DSA keys.”
- [claimed-docs] “Items in the Keychain can be referenced by multiple Hosts and Groups without duplicating them.”
- [claimed-docs] “Every account includes a Personal vault, accessible only to you and synced across all your devices.”
Tailscale enables password-less SSH access to servers (its Tailscale SSH feature and mesh network let users SSH into boxes without manual key exchange), evidenced by docs-6/docs-7 and community testimonials of SSHing into machines effortlessly (tailscale-comm-1). However, this works by replacing traditional SSH key-pair generation with Tailscale's own node identity and ACLs rather than an actual 'generate an SSH key pair' workflow, so the story as literally stated (generating SSH key pairs) is not directly evidenced. Missing for 10: explicit key-pair generation tooling/docs, first-party walkthrough of the Tailscale SSH feature, and independent verification of key-based passwordless access specifically.
- [claimed-docs] “Auditable access to SSH, K8s, databases, and more.”
- [claimed-docs] “just SSH'ed into my boxes, building code and pushing configs around like I'm home”
- [community] “Tailscale is my favorite (product) discovery of 2022... SSH'ing into a raspberry pi, accessing dev servers from other devices, giving access…”
power-userConnect to a saved host with one tap without re-entering credentials
weight 2 · round to TermiusDocs confirm saved hosts with credentials stored in Keychain/vault so users connect instantly without re-entering IPs/ports/passwords, with sync across devices enabling one-tap access from any client. Community evidence corroborates real-world quick reconnection (e.g., fixing servers from a phone). Missing for 10: independent hands-on verification specifically of the one-tap flow (vs. broader feature set) and no mention of biometric/one-tap unlock friction trade-offs.
- [claimed-docs] “No more re-entering IPs, ports, or password. Everything is saved, so you connect instantly.”
- [claimed-docs] “Items in the Keychain can be referenced by multiple Hosts and Groups without duplicating them.”
- [claimed-docs] “Every account includes a Personal vault, accessible only to you and synced across all your devices.”
- [claimed-docs] “Log in to your account — your Vaults, hosts, and configurations will be synced automatically.”
- [community] “Saved my butt once when my docker containers were bouncing while on vacation—debugged and deployed a fix from my iPhone while my wife drove.…”
- [community] “Wow, this app saved my butt over a year ago when I ran out of laptop battery in the field.”
Tailscale's mesh network keeps authenticated devices persistently reachable, and testimonials describe SSH'ing into boxes 'like I'm home' and managing home servers 'from my phone,' implying no per-session credential re-entry once connected. However, no evidence specifically documents a 'saved host' UI with one-tap connect (e.g., a bookmarked host list in the app), and some community reports describe friction (mobile client issues, NAT traversal problems) that complicate a seamless one-tap experience. Missing for 10: explicit one-tap saved-host UI documentation, first-party screenshots/demo of the connect flow, and independent confirmation of zero re-authentication across sessions.
- [claimed-docs] “just SSH'ed into my boxes, building code and pushing configs around like I'm home”
- [claimed-docs] “I now can manage my home NAS and my home k8s cluster…from my phone!”
- [community] “Tailscale is my favorite (product) discovery of 2022... SSH'ing into a raspberry pi, accessing dev servers from other devices, giving access…”
- [community] “This is the lowest friction personal VPN to ever exist, and once you see how easy it is for your own devices, you'll wish you had it at work…”
- [community] “If you have more complex cases, the IPTables/Netfilter rules make it vastly more difficult to manage... They've also broken features I relie…”
Not comparable on these axes
ai-native userRun the product headlessly / in CI for automation
weight 2 · not comparableTermiusn/aTermius is a GUI-based SSH/terminal client designed for interactive, human-driven sessions across desktop and mobile; running headlessly or in CI automation pipelines is outside its product category (no CLI, headless mode, or automation API is evidenced or implied by its design).
Docs show Tailscale can run inside Docker containers, be automated via auth keys/IaC/webhooks, and has a documented CLI for scripting—strongly suggesting headless/CI use—but there's no explicit CI pipeline example (e.g., GitHub Actions) in the evidence, and community feedback notes API keys expire every 60 days, complicating long-running automation. missing for 10: explicit CI/CD integration examples, confirmation of long-lived non-expiring credentials for unattended automation, and independent hands-on CI usage reports.
- [claimed-docs] “Explore how to use Tailscale inside Docker containers.”
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
- [probe] “official CLI documented at https://tailscale.com/docs/reference/tailscale-cli”
- [community] “our pricing ties number of servers to number of users... I don't see how this can ever work within the limits in their pricing plans... thei…”
ai-native userPlug MCP servers into this product so it can use their tools
weight 3 · not comparableTermiusn/aTermius is an SSH/terminal client focused on connectivity, key management, and collaboration; there is no evidence of any MCP server integration or plugin mechanism for AI tools, and this axis is not a natural fit for a terminal/SSH client product category.
ai-native userConnect an agent via an official MCP server
weight 3 · not comparableTermiusn/aTermius is an SSH/terminal client (an agent-adjacent tool for humans), not an ecosystem/platform expected to expose an official MCP server for other AI agents to connect to; no evidence suggests it plays that server role. This is a category mismatch rather than a missing feature.
ai-native userIssue scoped/least-privilege API credentials for an agent
weight 2 · not comparableTermiusn/aTermius is an SSH/terminal client for human users, not an agent platform or identity provider; issuing scoped API credentials for an AI agent is outside its product category and not something a buyer comparing terminal clients would expect.
Tailscalenone0/10The evidence pack shows general automation/API mentions (docs-12) and API keys expiring after 60 days (comm-15), but nothing about issuing scoped or least-privilege credentials specifically for an AI agent's use — no ACL tag scoping, OAuth client scopes, or agent-specific access controls are documented.
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
- [community] “our pricing ties number of servers to number of users... I don't see how this can ever work within the limits in their pricing plans... thei…”
ai-native userSubscribe to events via webhooks
weight 2 · not comparableTermiusn/aTermius is an SSH client/terminal app, not an event-driven platform; webhook subscriptions are outside its product category (wrong axis) rather than a missing feature.
Tailscale docs explicitly mention automating the tailnet via 'infrastructure-as-code providers, webhooks, and other integrations,' indicating webhook support exists, but there's no detail on event types, subscription setup, or payload schema, and no independent/community corroboration of using this feature. Missing for 10: documentation of specific webhook event catalog, setup/config details, and independent confirmation of real-world webhook usage.
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
ai-native userGet AI-generated insights and suggestions from my data inside the product
weight 2 · not comparableTermius docs mention AI-generated shell commands from plain-language descriptions (docs-6), which is a form of AI suggestion, but there's no evidence of AI-generated insights derived from the user's own data (e.g., analyzing session logs, host activity, or infrastructure patterns) — autocomplete (docs-11, docs-24) is rule/history-based, not AI-driven. missing for 10: AI analysis/insights over session logs or infrastructure data, dashboards or summaries generated from user data, independent/hands-on corroboration of the AI command feature.
- [claimed-docs] “Termius can convert a plain-language description into a shell command... Termius generates the command using AI.”
- [claimed-docs] “Autocomplete in Termius uses data from many sources to suggest snippets, shell history commands, paths, and built-in commands with arguments…”
- [claimed-docs] “Session logs are a record of your terminal activity. They help you review past work, troubleshoot issues, and collaborate with teammates.”
ai-native userDelegate tasks to a built-in AI assistant inside the product
weight 3 · not comparableTermius docs mention AI-assisted command generation from natural language (termius-docs-6), which is a narrow AI helper feature rather than a full agentic assistant capable of being delegated multi-step tasks. Missing for 10: evidence of autonomous task execution, multi-step delegation, or a persistent AI assistant beyond single-command translation, and no independent/hands-on corroboration of this AI feature's real-world use.
- [claimed-docs] “Termius can convert a plain-language description into a shell command... Termius generates the command using AI.”
ai-native userTest against a sandbox environment without touching production data
weight 1 · not comparableTermiusn/aTermius is an SSH/terminal client for connecting to and managing real servers, not a testing or sandboxing tool; there is no concept of a 'sandbox vs production' testing environment in its feature set. This axis is a category error for a terminal/SSH client.
ai-native userSchedule recurring jobs or workflows
weight 2 · not comparableTermiusnone0/10Termius offers snippets, broadcast commands, and templates, but no evidence of scheduling recurring jobs or workflows (e.g., cron-like triggers or timed automation) exists in the pack.
ai-native userVersion, review, and roll back my automations
weight 1 · not comparableTermiusnone0/10Termius offers snippets, templates, and logs, but there is no evidence of version control, review workflows, or rollback capability for automations/snippets—no changelog, history, or revert feature is documented.
power-userAmend the latest commit or undo unpushed commits to fix or split them
weight 2 · not comparableTermiusn/aTermius is an SSH client/terminal tool, not a git client or version control tool; amending or undoing commits is entirely outside its product category (wrong axis).
developerSearch and navigate code content using fuzzy matching, filters, and regular expressions
weight 2 · not comparableTermiusn/aTermius is an SSH/terminal client, not a code editor or repository tool; searching/navigating code content with fuzzy matching, filters, and regex is a wrong-axis capability for this product category. It only offers log searching, not code content search/navigation.
developerClone Git repositories over HTTPS, SSH, or the Git protocol
weight 3 · not comparableTermiusn/aTermius is an SSH/terminal client focused on server connections, file transfer, and session management, not a Git client or version control tool; cloning Git repositories over HTTPS/SSH/Git protocol is outside its product category.
power-userVisualize the full commit graph across branches
weight 2 · not comparableTermiusn/aTermius is an SSH/terminal client, not a source-control or git tool; visualizing a commit graph across branches is entirely outside its product category.
developerCommit and push changes directly from my device
weight 3 · not comparableTermiusn/aTermius is an SSH/terminal client for connecting to remote hosts, snippets, and file transfer—it has no git integration or version control features for committing/pushing code. This story is a category error for this product type.
power-userSign my commits with a GPG or SSH key for verification
weight 1 · not comparableTermiusn/aTermius is an SSH/terminal client focused on connection management, not a git/version-control tool; commit signing with GPG/SSH keys is a git workflow feature outside its product category. Evidence covers SSH key generation/management for authentication, not git commit signing.
power-userInteractively rewrite history by deleting, editing, squashing, or reordering commits
weight 2 · not comparabledeveloperResolve merge conflicts across many files at once with a dedicated tool
weight 2 · not comparableTermiusn/aTermius is an SSH/terminal client, not a source-control or code-diff tool; merge conflict resolution is entirely outside its product category.
developerCreate pull requests on hosted Git platforms directly from my device
weight 3 · not comparableTermiusn/aTermius is an SSH/terminal client focused on connecting to hosts, managing keys, and terminal collaboration; it is not a Git hosting or Git workflow tool and has no evidence of Git/PR integration, so creating pull requests is outside its product category.
developerReview pull requests from my phone while on the go
weight 3 · not comparableTermiusn/aTermius is an SSH/terminal client, not a git/code review tool; it has no mention of pull requests, git hosting integration, or code review workflows. Reviewing PRs is outside its product category (wrong axis), even though it supports mobile terminal SSH sessions.
Tailscalen/aTailscale is a network connectivity/VPN tool; reviewing pull requests is a git-hosting/code-review workflow entirely outside its product category. It could enable mobile access to a self-hosted git server, but that's a stretch not evidenced, and the axis itself is a wrong-category fit for a networking product.
power-userStash and unstash changes to temporarily clear my working directory
weight 2 · not comparableTermiusn/aTermius is an SSH/terminal client, not a version control tool; git stash/unstash is a wrong axis for this product category.
power-userClone, update, and manage Git submodules within a repository
weight 1 · not comparableTermiusn/aTermius is an SSH/terminal client focused on host management, file transfer, and session tools; Git submodule management is a source-control operation entirely outside its product category, not something a terminal client would ship as a feature.
developerPreview Markdown, HTML, and other rendered files with live reload
weight 2 · not comparableTermiusn/aTermius is an SSH/terminal client focused on remote connections, file transfer, and terminal collaboration; it has no evidence of rendering Markdown/HTML preview with live reload, which is a file/document-editing feature outside its category as a terminal tool.
power-userRoute all my internet traffic through a specific device on my network using an exit node
weight 2 · not comparableTermiusn/aTermius is an SSH/terminal client with port forwarding and tunneling (local/remote/dynamic), not a VPN or mesh-networking tool that can route all device traffic through an exit node. This capability is outside the product's category (SSH/SFTP session management), so the axis does not apply.
- [claimed-docs] “Termius supports all three main types of port forwarding (local, remote, and dynamic) and lets users manage their port-forwarding rules thro…”
- [claimed-docs] “Termius doesn't depend on the cloud to manage your access. Your infrastructure is stored and encrypted locally. Connect directly to your ser…”
First-party docs explicitly document exit nodes for routing all internet traffic through a specific device, and community evidence corroborates real-world use of exit nodes (e.g., using a home exit node to bypass geo-blocking). Missing for 10: independent hands-on walkthrough of exit-node setup/performance and more detail on configuration nuances.
- [claimed-docs] “Route all internet traffic through a specific device on your network.”
- [community] “I was once in South Africa and needed to look up my prescriptions in the CVS app... CVS geoblocked me. Luckily I had a TailScale exit node r…”
developerUse subnet routers to reach devices outside my local network as if I were on it
weight 2 · not comparableTermiusn/aSubnet routing (reaching an entire remote subnet via a single gateway node, à la Tailscale subnet routers) is a mesh-VPN networking feature, not something an SSH/terminal client like Termius provides. Termius offers per-host jump hosts, port forwarding, and tunneling, but these require configuring access per host/service, not exposing a whole subnet transparently — this capability class is outside Termius's product category.
Tailscale's docs explicitly describe subnet routers giving devices outside the local network access to services within specific subnets, plus broader infrastructure access (Kubernetes, SSH, cloud/on-prem) and community hands-on confirmation of SSH'ing into remote boxes and managing home NAS/k8s clusters as if local. Missing for 10: independent third-party benchmark or detailed hands-on walkthrough specifically of subnet router setup (rather than general VPN/exit-node use).
- [claimed-docs] “Use subnet routers to give devices outside your local network access to services within specific subnets.”
- [claimed-docs] “Auditable access to SSH, K8s, databases, and more.”
- [claimed-docs] “Across clouds or on-prem, Tailscale’s mesh overlay network connects it all.”
- [claimed-docs] “just SSH'ed into my boxes, building code and pushing configs around like I'm home”
- [claimed-docs] “I now can manage my home NAS and my home k8s cluster…from my phone!”
- [community] “Tailscale is my favorite (product) discovery of 2022... SSH'ing into a raspberry pi, accessing dev servers from other devices, giving access…”
developerAccess and work with files and repositories from other apps' sandboxes on my device
weight 2 · not comparableTermiusn/aTermius is an SSH/terminal client focused on remote server management, not a file-system/document interop tool with iOS/Android app-sandbox file access (like Files app document providers). Accessing other apps' sandboxed files/repos is outside its product category.
ai-native userExport all of my data in open formats and leave
weight 3 · not comparableTermiusnone0/10Evidence shows Termius supports importing hosts/keys from SSH config and CSV files, but nowhere does the pack mention any export function for hosts, keychains, snippets, or vaults in open formats, and community comments raise concern about SSH keys being stored on Termius' servers with no mention of an exit path.
- [claimed-docs] “Termius supports importing the contents of the `~/.ssh` folder, including `ssh_config`, `known_hosts`, and key files”
- [claimed-docs] “Termius can import hosts from a CSV file, including labels, IP addresses, protocols, ports, groups, subgroups, tags, and credentials.”
- [community] “The only benefit of Termius seems to be a few nice colours, with the downside of being able to store your SSH keys on Termius' servers.”
- [community] “I'm usually wary of using closed-source programs for sensitive tasks like SSH. I haven't found details on the crypto libraries used or secur…”
ai-native userPrevent my data from being used to train AI models
weight 3 · not comparableTermiusnone0/10No evidence pack item mentions AI training data opt-out, data usage policy for model training, or any privacy control specific to AI training; only unrelated AI-command-generation feature (termius-docs-6) is mentioned, which does not address data usage/training consent.
ai-native userHave an AI agent analyze my pull requests and suggest code improvements from my phone
weight 3 · not comparableTermiusn/aTermius is a mobile-capable SSH/terminal client; PR analysis and code-suggestion agents are a code-review/CI-integration capability outside its category, which focuses on terminal sessions, host management, and shell command AI assistance. Nothing in the evidence shows PR/code review integration, so this is a wrong-axis question rather than a missing feature.
Tailscalen/aTailscale is a network connectivity/VPN product, not an AI agent or code-analysis tool; analyzing PRs and suggesting code improvements is entirely outside its category. It could at most provide network access to reach such an agent, but that's a different axis from the story itself.
ai-native userGet AI-generated commit message suggestions based on my staged changes
weight 2 · not comparableTermiusn/aTermius is an SSH/terminal client, not a version control or git tool; commit message generation is unrelated to its product category (its AI feature is for generating shell commands, not git commits).
ai-native userDirect an AI agent to browse, search, edit, commit, pull, and push in a repository via conversation
weight 3 · not comparableTermiusn/aTermius is an SSH/terminal client, not an AI coding agent or repo-management tool; the story asks for an AI agent to browse/search/edit/commit/pull/push in a repository via conversation, which is a category error for this product type. Its AI feature is limited to generating shell commands from plain language, not agentic repo operations.
- [claimed-docs] “Termius can convert a plain-language description into a shell command... Termius generates the command using AI.”
ai-native userAssign an issue to an AI coding agent and receive a ready-to-review pull request
weight 3 · not comparableTermiusn/aTermius is an SSH/terminal client for managing server connections, not an AI coding agent or issue-tracking/PR workflow tool; assigning issues to agents and receiving PRs is outside its product category.
ai-native userConverse with an AI agent in natural language to get insights into repositories and open pull requests
weight 2 · not comparableTermiusn/aTermius is an SSH/terminal client for managing servers; it has no repository or pull-request awareness, and this story's subject (AI conversational insight into repos/PRs) is a wrong-axis category error for this product type. Its only AI feature is natural-language-to-shell-command generation, unrelated to repos/PRs.
- [claimed-docs] “Termius can convert a plain-language description into a shell command... Termius generates the command using AI.”
developerManage and track cloud-based coding agent tasks from my phone
weight 2 · not comparableTermiusn/aTermius is an SSH/terminal client for managing servers, not a platform for orchestrating or tracking cloud-based AI coding agent tasks; nothing in the evidence relates to coding agent task management.
ai-native userDescribe what I want in plain language and have the tool generate the corresponding shell command
weight 2 · not comparableTermius docs explicitly state it can convert a plain-language description into a shell command via AI generation, directly matching the story. However, this is a single first-party doc claim with no independent/hands-on corroboration, no detail on scope/accuracy, and no community evidence discussing this AI feature. missing for 10: independent or hands-on verification of the AI command-generation feature, detail on its reliability/limitations, and broader documentation beyond one line.
- [claimed-docs] “Termius can convert a plain-language description into a shell command... Termius generates the command using AI.”
developerStore credentials once in a secure vault and reference them from multiple hosts
weight 2 · not comparableTermius provides a Keychain vault where credentials (SSH keys, passwords) are stored once and referenced by multiple Hosts and Groups without duplication, backed by Personal and Team vaults synced across devices with encryption. This directly matches the story's core need of centralized credential storage referenced across hosts. Missing for 10: independent/hands-on verification of the vault-reference mechanism specifically (community evidence covers general SSH client experience but not this exact vault-reuse workflow), and no detail on encryption specifics beyond marketing claims.
- [claimed-docs] “Items in the Keychain can be referenced by multiple Hosts and Groups without duplicating them.”
- [claimed-docs] “Every account includes a Personal vault, accessible only to you and synced across all your devices.”
- [claimed-docs] “When you add team members, a Team vault is created automatically. This vault is shared with all team members, allowing your team to manage i…”
- [claimed-docs] “Termius transforms this process with team vaults. Vaults serve as a single source of truth for Hosts, Groups, Snippets, Port Forwarding rule…”
- [claimed-docs] “Create and manage your SSH keys with passphrase protection. Everything is encrypted and easily accessible from any device.”
Tailscalen/aTailscale is a networking/VPN mesh product, not a secrets/credentials vault; the evidence pack shows it provides secure network access (SSH, Kubernetes, subnet routing) but no capability for storing or referencing credentials/secrets. This story is a category error for this product type.
power-userStore my SSH keys in a hardware-backed secure enclave protected by biometrics
weight 2 · not comparableTermius docs explicitly claim 'device-bound keys and biometric protection with Windows Hello, Touch ID/Face ID, or Android biometrics' plus FIDO2 security key support, matching the hardware-backed/biometric claim reasonably well. However, there's no explicit mention of a 'secure enclave' term or independent verification of how keys are hardware-isolated, and community comments express skepticism about SSH keys being stored on Termius' servers and about closed-source crypto practices, which tempers confidence without concretely disproving the biometric/device-bound claim. Missing for 10: independent/hands-on verification of the secure-enclave implementation, explicit documentation of enclave/TPM/Keystore usage, and resolution of community concerns about key storage location.
- [claimed-docs] “Secure connections with device-bound keys and biometric protection with Windows Hello, Touch ID/Face ID, or Android biometrics.”
- [claimed-docs] “Secure SSH authentication with FIDO2 security keys and MFA.”
- [claimed-docs] “Create and manage your SSH keys with passphrase protection. Everything is encrypted and easily accessible from any device.”
- [community] “The only benefit of Termius seems to be a few nice colours, with the downside of being able to store your SSH keys on Termius' servers.”
- [community] “I'm usually wary of using closed-source programs for sensitive tasks like SSH. I haven't found details on the crypto libraries used or secur…”
developerEdit files with a terminal-based editor and run syntax/lint checkers inside the app
weight 2 · not comparableTermiusn/aTermius is an SSH client/terminal app for connecting to remote hosts, not a text editor or IDE with built-in linting/syntax-checking capability; editing and running lint checkers is outside its product category (users would rely on remote shell tools like vim/nano and remote linters via SSH, not a Termius-native feature).
developerInstall additional pure-Python packages using pip directly on my device
weight 2 · not comparableTermiusn/aTermius is an SSH/terminal client, not a Python runtime or package manager; installing pip packages would occur on the remote host's OS itself, not as a Termius feature. This axis is a category error for this product type.
power-userGroup multiple terminal sessions together and broadcast the same command to all of them
weight 2 · not comparableTermius Workspaces feature explicitly groups multiple terminal sessions and broadcasts the same input to all of them, with templates capturing layout, tabs, and running commands (termius-docs-18, termius-docs-19, termius-docs-4). Missing for 10: independent hands-on corroboration of broadcast reliability across many hosts and any documented limits/edge cases from community sources.
- [claimed-docs] “Workspaces group multiple terminal sessions into one focused environment... Broadcast the same input to multiple sessions”
- [claimed-docs] “Workspace templates capture: Included connections, Tab names, Layout configuration, Working directories, Running commands at the time of sav…”
- [claimed-docs] “You can broadcast a command to all sessions simultaneously and save the entire setup as a reusable template.”
developerRun local UNIX commands like ls, grep, cat, tar, and curl directly in the app
weight 3 · not comparableTermiusnone0/10All evidence describes Termius as an SSH/SFTP client for connecting to and managing remote hosts (snippets run on hosts, port forwarding, session logs, SFTP), with no mention of a local shell/terminal mode for running commands like ls, grep, cat, tar, curl directly against the local machine. Missing for 10: any documentation or community confirmation of a local terminal tab/local command execution feature.
- [claimed-docs] “execute them on multiple hosts at once from the Snippets screen”
- [claimed-docs] “In Termius, a snippet is a labeled shell script that you can save and run on different hosts without retyping it.”
- [claimed-docs] “Dual-pane interface on the desktop: manage local or remote files side-by-side”
- [claimed-docs] “Integrated workflow: switch between a terminal session and an SFTP session for the same host with a single click”
Tailscalen/aTailscale is a networking/VPN mesh product, not a terminal/agent app with a built-in shell; running local UNIX commands like ls/grep/tar/curl inside 'the app' is a category error for this product type — it enables SSH connectivity to remote machines but does not itself execute local shell commands.
power-userOpen multiple terminal sessions, each with its own context, appearance, and history
weight 3 · not comparableTermius Workspaces explicitly group multiple terminal sessions with per-session tab names, layout, working directories, and saved templates, while each Host retains its own connection context, keychain-linked credentials, and per-host session logs/history. Community evidence corroborates multi-session use in the field (e.g., managing multiple servers via saved snippets and SSH sessions), though performance complaints on Windows suggest some friction at scale. Missing for 10: independent hands-on verification of per-session appearance customization (themes/fonts) and no direct community testimony about running many concurrent tabs smoothly.
- [claimed-docs] “Workspaces group multiple terminal sessions into one focused environment... Broadcast the same input to multiple sessions”
- [claimed-docs] “Workspace templates capture: Included connections, Tab names, Layout configuration, Working directories, Running commands at the time of sav…”
- [claimed-docs] “Session logs are a record of your terminal activity. They help you review past work, troubleshoot issues, and collaborate with teammates.”
- [claimed-docs] “A group is a labeled collection of Hosts that share a common characteristic, such as a customer, location, or environment.”
- [community] “Combination of Termius's saved snippets and short shell scripts let me do monitoring without running a separate web-server behind auth. Easi…”
- [community] “Termius on Windows falls short of usability threshold due to slow performance at high resolutions—scrolling large text is much worse than gn…”
power-userCustomize the font, colors, and cursor appearance of my terminal and persist the settings
weight 2 · not comparableTermiusnone0/10No vendor documentation describes font, color, or cursor customization for Termius, and a community report explicitly states the user could not add custom fonts, indicating this capability is not evidenced or is missing.
- [community] “Not sure if I missed something, but I can't add custom fonts.”