sshguru web-01 connected Start free
A black home router lying on the desk

SSH with a guru on the line.

An AI expert for anyone who looks after a Linux box. Nothing runs until you click, and your keys never leave your browser.

Start free Free for 3 servers. No card needed.

web-01connected

web-01 is almost out of disk. What is eating it?

Looking before touching anything.

deploy@web-01:~$ df -h /
Filesystem  Use%  Mounted on
/dev/sda1    91%  /
deploy@web-01:~$
The Guru: a bearded man in a green beanie and hoodie, sitting cross-legged with a laptop and a mug, one finger raised

It can't run a thing until you click.

Say what's wrong and the Guru looks first, with read-only commands. Anything that changes state arrives as a card. Fixed rules set the risk tier, and the destructive ones make you type the hostname.

web-01 is a made-up server, and these buttons work. Click one, or scroll on and watch nothing happen.

web-01connectedwaiting for you

web-01 is almost out of disk. What is eating it?

Looking before touching anything.

Tier 0 · read onlyran automatically
df -h /

Disk / is at 91% and grew 6 GB since yesterday, mostly /var/log/journal.

Tier 1 · changes stateproposed by the Guru
sudo journalctl --vacuum-size=500M

Deletes archived journal files beyond 500 MB. Active logs are untouched.

deploy@web-01:~$ df -h /
Filesystem  Use%  Mounted on
/dev/sda1    91%  /

It stays in your tab.

The SSH client is compiled to WebAssembly and runs in the page. Your key is encrypted with your passphrase before it's stored, and the relay and the board only ever carry scrambled bytes.

Most web SSH tools

  1. Your browser
  2. Their server holds your key
  3. Your server

You upload your private key, and their machine logs in for you.

SSH Guru

  1. Your browserholds your key
  2. Relayciphertext
  3. Boardciphertext
  4. Your server

There's no path from our side into your machine.

Open a port and hope nobody finds it.

That's the usual way to reach a machine from outside. Behind a home router it takes seven chores, and you keep looking after them forever.

7steps, the usual way

  1. Find the router admin page, and the password from the sticker you threw away.
  2. Reserve a fixed LAN address for the server.
  3. Forward a public port to the server's port 22.
  4. Sign up for dynamic DNS, because your home IP changes.
  5. Turn off password logins. Keys only.
  6. Install fail2ban and keep an eye on the auth log.
  7. Do all of it again for every machine you want to reach.

4steps, total, behind anything

  1. Create a free account and set a vault passphrase.
  2. Flash a $5 ESP32-S3 from the browser (Chrome or Edge).
  3. Write its allow list: this machine, port 22.
  4. Plug it into any powered USB port: a charger, or the router itself.

Home router. Starlink or 5G. Office firewall. Phone hotspot. Someone else's router. It doesn't matter.

A black home router on the desk
A black USB-C plug
An ESP32-S3 SuperMini board, about the size of a postage stamp

A $5 board reaches everything behind your router.

Flash an ESP32-S3 from the browser and plug it in near the router. It dials out, so nothing changes on your router and nothing listens on your network.

Done for the day?

Pull the cable. That's the off switch.

The way in is gone.

Nothing on your network is reachable now. Plug it back in when you need it.

Bridge online.

Dialling out to SSH Guru. No port forwarding, no VPN, works behind CGNAT. The rules live on the board, changed only over the cable.

Two parts, about fifteen minutes of setup.

SSH Guru flashes the board from your browser in about a minute. After that it only needs power near your router.

It keeps an eye on things while you sleep.

Pick a check, pick a server. The Guru installs a small read-only watcher with one command you approve. It reports out on a schedule, and if something looks wrong, or the server goes quiet, you hear about it in Telegram.

  • Disk space
  • CPU, memory, load
  • Failed logins
  • Security updates
  • Certificates
  • AI log watch
  • Docker health
  • Backups fresh

SSH Guru still never holds a key. The watcher can only report, and it takes no commands.

A phone face up on a dark bedside table at night, lit by one message

SSH Guru

web-01: disk / is at 91% and grew 6 GB since yesterday, mostly /var/log/journal.

Open watchesMute 24 h

Start free. Pay when it earns it.

Free

$0

  • 3 servers
  • 30 Guru messages a day on house models
  • 3 watches
  • 1 bridge
  • Share 1 server with anyone

Pro

$9/month

  • Unlimited servers and watches, down to every minute
  • Your own AI: ChatGPT sign-in, API keys
  • Read-only autopilot, runbooks, jump hosts
  • AI log watch on the model you chose
  • 5 bridges
  • Share 3 servers

Team

$29/month

  • Everything in Pro for five people
  • Audit log of every approval
  • 25 bridges
  • Share 25 servers

Bring a problem. Keep your keys.

web-01, this session

You didn't click anything, so nothing changed on web-01. That's the deal.

Free for 3 servers. No card needed.

The Guru, one finger raised