Encrypted SSH vault
The vault is one file at ~/.ilead/vault.bin. Argon2id derives the key. AES-256-GCM seals hosts, passwords, SSH keys, snippets, notes, playbooks, and tunnel settings. A locked vault cannot list hosts. This is an encrypted SSH vault, not a plaintext session list.
Import an existing SSH fleet
Move off MobaXterm, PuTTY, WinSCP, Xshell, SecureCRT, FileZilla, mRemoteNG, SuperPuTTY, Cyberduck, or a raw ~/.ssh/config without retyping. iLead is a MobaXterm alternative and a PuTTY alternative that starts from the sessions you already have, and it shows you every host in an import pack before anything merges.
Sync and scheduled backup across your own devices
Point two machines at the same folder you already use, iCloud Drive, Dropbox, OneDrive, Google Drive, a NAS, and they merge hosts, keys, snippets, tunnels, and notes automatically. On macOS the iCloud destination gets a real sign-in check through Apple's own API, not a guess based on whether a folder exists. Separately, a scheduled backup writes dated, encrypted snapshots to as many destinations as you want, keeping only the last N copies of each. There is no relay server and no account to create anywhere in this flow.
Session recording, playback, and presentation-video capture
Turn on recording for a session and replay it later at up to 4x speed, or download it as a plain-text transcript. Record presentation mode goes further: it captures the terminal itself side by side with your webcam, narrated over the microphone, and saves it as a real video for a walkthrough or a demo you'd actually share, not a wall of text. Separately, a command audit log tracks the ops commands, log pulls, kills, and container actions you actually run, deliberately excluding interactive keystrokes, which stay private unless you choose to record them.
Browser companion terminal
Open one live session in a browser on your network with a link that expires after a duration you pick, 15 minutes to 24 hours, or never. It talks straight to your machine. No relay server, no cloud account, and the browser can never pick a different host than the one you shared.
Fleet SSH, playbooks, host monitoring, and containers
Run one command or a playbook across many hosts and see every result together. Save your own commands as custom playbooks right alongside the built-in ones. Pull a journal or file snapshot, or send a Wake-on-LAN packet to a sleeping host. Watch live CPU, memory, disk, and process metrics for a host and kill a runaway process directly, or list and manage Docker, Podman, and Kubernetes containers - start, stop, restart, and pull logs, without a separate orchestration dashboard. iLead is a DevOps SSH manager for a small desk, not a twenty-terminal ritual.
Split panes and broadcast typing
View 2 or 4 sessions at once in a grid instead of switching tabs, with sessions staying alive when you toggle layouts. Turn on broadcast typing to mirror keystrokes from one focused session into others you pick, useful for running the same command across a small cluster by hand.
SFTP client with inline file editing and SSH tunnels
Browse files over SFTP, drag-and-drop to upload or download, and open a remote file directly in your own system's default text editor, the way Cyberduck's "Open" does it - save it there and the edit uploads back automatically, no separate download-edit-upload dance. Set Unix permissions with a real checkbox grid instead of memorizing octal. Start local or remote SSH port forwards, or a SOCKS5 proxy, with one-click presets for Postgres, MySQL, Redis, and MongoDB. The SFTP client and the SSH tunnel share the same vault as the terminal.
Reusable command snippets and macros
Save a command once, with placeholders for the parts that change, and drop it into any terminal from a dropdown, with an optional confirmation step and a one-click sudo toggle. iLead ships with a curated set of security and maintenance snippets already filled in, correct fail2ban and firewall setup included, not just placeholders for you to figure out.
Encrypted notes and SSH keys
Notes sit in the vault, not in a side markdown folder. SSH key records stay sealed, with support for agent forwarding and certificate-based auth per host. Encrypted SSH notes travel with the backup file.
Lockout protection and opt-in local servers
Too many wrong unlock passwords in a row locks the vault for a while, configurable, and survives a restart - it's not just a session timer. Optionally capture a photo from the camera on a failed attempt, resolved once when you turn it on, not live during an actual break-in attempt. Separately, iLead can stand up a local HTTP file server or an inbound SFTP server for quick one-off file transfers - both default to this device only, with a separate opt-in-plus-confirmation step before either is ever reachable from your network.
Self-service licensing: manage every device on your seat
See every device holding a seat on your subscription and free any of them yourself, not just the one you're on - the fix for a broken, lost, or retired machine that can't run iLead itself to give up its seat. No support ticket required.
Native SSH client everywhere
Apple silicon SSH without Rosetta. Intel Mac. Windows SSH client, with RDP and VNC for the hosts that need them. Linux SSH client. A 7-day trial needs no account - Connect works immediately; a yearly seat unlocks Ops, Snippets, Backup, export, and Arcana. After cancel, unlock and export still work.