Skip to main content
A1SI-TERM application iconA1SI-TERM

Cross-platform terminal — early access

One terminal for the regulated and the industrial.

A1SI-TERM is a cross-platform desktop client that unifies SSH, Telnet, Serial, Raw TCP/UDP, and SFTP in one native application — with first-class support for industrial protocols (Modbus RTU over serial), audit-grade session recording aligned with 21 CFR Part 11, and a declarative command-policy engine. Replaces Tera Term, PuTTY, Termius, WinSCP, and Cyberduck. Early access opening now.

a1si-term — SSH session
A1SI-TERM running a live SSH session: a terminal tab connected to 127.0.0.1 showing a color-coded directory listing and a host login banner, with a connected-session status bar along the bottom.

Desktop Workspace

Every protocol your engineers use, in one native window.

Six transports — SSH, SFTP, Telnet, Serial, Raw TCP, and UDP — live in one native window — and the app automatically shows only the controls each connection type actually supports. Tabbed sessions, a left-rail host tree, a dual-pane SFTP browser, and Ctrl-Shift-B broadcast typing across tabs let one operator drive an entire fleet from one window.

  • Six transports, one adaptive interfaceSSH (password / key / agent auth, trust-on-first-use host-key prompt, PTY resize), SFTP (dual-pane browser with drag-drop, resume, per-transfer SHA-256 verify, rate-limit, retry, directory diff), Telnet (xterm-compatible key translation), Serial (full RS-232 / 422 / 485 option set with RTS / DTR / BREAK and replug-aware reconnect), Raw TCP byte-stream, and UDP datagram — the app shows only the options each connection type supports.
  • Regulated-host mode, aligned with 21 CFR Part 11Flip a host into regulated mode and session recording captures every byte — exactly as it arrived, before any display processing — into a hash-chained, append-only, Ed25519-signed audit record. A persistent red banner is shown for the duration; transcripts replay deterministically and export to JSONL or PDF. Designed to support Part 11 workflows — certification of any specific workflow remains the customer's responsibility.
  • Part 11 § 11.200 e-signature ceremonyAn e-signature dialog collects operator identity, the meaning of the signing, and a justification before action proceeds. Continuous-access controls enforce 15-minute idle and 60-minute absolute session caps per user, host, and connection type. A regulated tab-lock disables terminal input while a signing-session is locked and re-enters the ceremony on unlock or OS screen-lock.
  • Modbus RTU live decode and register-map overlaysA Modbus RTU frame decoder with CRC taps directly off the serial transport, with per-device register-map overlays in a live register view. Watch holding registers, input registers, coils, and discrete inputs update in real time as a controller drives a sign, a scale, or a PLC — no separate protocol analyzer required.
  • Paste sanitizer and policy engine — clipboard-injection defenseEvery paste is stripped of dangerous escape sequences (OSC 52 clipboard writes, DCS tmux passthrough, Kitty keyboard mode changes, DA / DSR reply-poison, bracketed-paste markers, window-manipulation CSI t) before being wrapped in bracketed-paste. A declarative policy engine (a flexible rule language plus bundled destructive-command and regulated-command rule packs) layers warn / confirm / block actions on outgoing commands.
  • Layered credential vault and ssh_config importOS keyring (Windows Credential Manager, macOS Keychain, Linux Secret Service) layered over an Argon2id-wrapped AES-256-GCM file vault with secrets wiped from memory after use, plus an ssh-agent client. Bring your existing ~/.ssh/config along with you — the importer handles recursive Include, ProxyJump, and Match metadata.

Built for serious work

Built to replace the five tools your engineers juggle today.

Tera Term, PuTTY, Termius, WinSCP, Cyberduck — five tools that each do one piece of the job. A1SI-TERM brings them under one native window with the regulated-mode and industrial-protocol primitives none of them ship.

Native on Windows, macOS, and Linux

Windows 10 / 11 (x64), macOS 13+ (Apple Silicon + Intel), and Ubuntu 22.04+ / Fedora 39+. One application, three native targets — identical features and shortcuts on every desk. Signed installers, notarized DMG, and .deb / AppImage land with the v1.7 release.

Twelve bundled themes, four theme importers

Dracula, Nord, Catppuccin Mocha, Gruvbox dark and light, Solarized dark and light, One Dark, Monokai, Tomorrow Night, GitHub Dark, and Windows Terminal default — plus importers for iTerm2, Windows Terminal, base16, and PuTTY palettes. Live preview in the Settings dialog.

Saved hosts, groups, and workspaces

Organize saved hosts into groups and workspaces, with every change saved safely the moment you make it — plus an ssh_config importer that handles recursive Include, ProxyJump, and Match. Bring your fleet in once; everyone on the team gets the same view.

Panic-exit and screen-lock awareness

A keyboard shortcut terminates every active regulated signing-session, records the panic exit in the audit trail, flushes pending audit records, and exits the application. Locking your OS screen ends regulated signing sessions automatically; deeper platform-native screen-lock integration is coming in a future release.

Structured logs with secret redaction

Logs are structured and machine-readable, with automatic secret redaction that filters known credential patterns before anything is ever written. Operators get auditable telemetry without ever logging a credential.

Audit records for direct file operations

Direct SFTP operations — remove, rename, chmod, mkdir, rmdir, symlink — are covered by policy evaluation, optional e-signature, and start / complete / failed audit records, so destructive file actions on a regulated host are audit-attributable even when they bypass the transfer queue.

Built to be depended on

Engineered to outlast the tools it replaces.

A1SI-TERM is validated continuously on Windows, macOS, and Linux before any release reaches you — the same disciplined engineering A1SI applies to its regulated-industry products. Credentials live in your operating system's native keychain, never in plain-text config files.

Credentials
Stored in the native OS keychain
Platforms
Windows 10/11, macOS 13+, Linux (Ubuntu 22.04+, Fedora 39+)
Transports
SSH, SFTP, Telnet, Serial (RS-232/422/485), Raw TCP, UDP
Quality
Validated on all three platforms before every release

Why A1SI-TERM

Five tools, one window — built right.

Regulated by design

Regulated-mode is a first-class primitive, not an add-on. Session recording captures every byte — exactly as it arrived — into a hash-chained, Ed25519-signed, tamper-evident record; the § 11.200 e-signature ceremony collects identity, meaning, and justification with continuous-access controls that enforce idle and absolute session caps; transcripts replay deterministically and export to JSONL or PDF. The platform produces the artifacts regulated workflows depend on — certification of any specific workflow remains the customer's responsibility.

Industrial-grade by default

Modbus RTU frame decode with CRC and per-device register-map overlays in a live register view; full RS-232 / 422 / 485 option support with RTS / DTR / BREAK and replug-aware reconnect; a paste sanitizer that strips terminal-injection sequences before bracketed-paste; a declarative policy engine with bundled destructive-command and regulated-command rule packs. The shop-floor stays in the shop floor — not on a sticky note next to the laptop.

One tool, every protocol

Six transports — SSH, SFTP, Telnet, Serial, Raw TCP, and UDP — in one native application that shows only the controls each connection type supports. Tabbed sessions, a left-rail host tree, four-tab saved-host editor, dual-pane SFTP browser, transfer-queue dock, and Ctrl-Shift-B broadcast typing across tabs. Replaces Tera Term, PuTTY, Termius, WinSCP, and Cyberduck without giving up the native window your operators expect.

Questions & answers

Frequently asked questions

What is A1SI-TERM?

A1SI-TERM is a cross-platform desktop terminal that unifies six transports — SSH, SFTP, Telnet, Serial, Raw TCP, and UDP — in one native application, with first-class industrial-protocol support (Modbus RTU over serial), audit-grade session recording aligned with 21 CFR Part 11, and a declarative command-policy engine. It is positioned to replace Tera Term, PuTTY, Termius, WinSCP, and Cyberduck.

Is A1SI-TERM 21 CFR Part 11 certified?

No. A1SI-TERM is aligned with 21 CFR Part 11, not certified or validated. In regulated-host mode it records every byte exactly as it arrived into a hash-chained, append-only, Ed25519-signed audit record, runs a § 11.200 e-signature ceremony that collects operator identity, meaning, and justification, and produces transcripts that replay deterministically and export to JSONL or PDF. The platform produces the artifacts regulated workflows depend on, but certification of any specific regulated workflow — including legal, compliance, and validation review — remains the customer’s responsibility.

Which operating systems does it run on?

A1SI-TERM is a native desktop client for Windows 10/11 (x64), macOS 13+ (Apple Silicon and Intel), and Linux (Ubuntu 22.04+, Fedora 39+) — one application with identical features and shortcuts on every desk. It is a desktop client only; there is no iOS or Android build.

What industrial and serial protocols does it support?

It provides full RS-232 / 422 / 485 serial support with RTS / DTR / BREAK control and replug-aware reconnect, plus a Modbus RTU frame decoder with CRC that taps directly off the serial transport. Per-device register-map overlays show holding registers, input registers, coils, and discrete inputs updating in real time as a controller drives a sign, scale, or PLC — no separate protocol analyzer required.

How does it protect credentials and defend against terminal injection?

Credentials live in the native OS keychain — Windows Credential Manager, macOS Keychain, or Linux Secret Service — layered over an Argon2id-wrapped AES-256-GCM file vault, with an ssh-agent client and ssh_config import. Every paste is stripped of dangerous escape sequences (OSC 52 clipboard writes, DCS tmux passthrough, Kitty keyboard mode changes, reply-poison, window-manipulation sequences) before being wrapped in bracketed-paste, and a declarative policy engine layers warn / confirm / block actions on outgoing commands.

Can I download it, and how much does it cost?

Not yet from a public channel. A1SI-TERM is in pre-release / early access — feature scope, availability, pricing, and release timing are subject to change. Production-signed installers, Microsoft Store and Mac App Store distribution, and license-key activation land with the v1.7 release. Join the early-access list on this page to get the production build the moment it ships.

Plans & availability

How to get A1SI-TERM.

A1SI-TERM is in early access now and moving toward a licensed v1.7 release. There is no online checkout — early access is free to join, and licensing is arranged directly.

Early access

Available today, at no cost, while the product is in pre-release.

  • The current cross-platform build (Windows, macOS, Linux)
  • Direct line to shape regulated-workflow features
  • First access to the production build when v1.7 ships

Licensed (v1.7)

The production release — license-key activation, signed installers, store distribution.

  • Production-signed installers + Microsoft Store / Mac App Store
  • License-key activation
  • 21 CFR Part 11-aligned audit transcripts + e-signature ceremony

Pricing and license terms for the v1.7 release are arranged per engagement — request pricing and we will walk you through the options for your team. Feature scope, availability, and timing are subject to change while in early access.

Ready for the terminal your engineers deserve?

A1SI-TERM is in early access. Production-signed installers, store distribution, and license-key activation land with v1.7. Get on the early-access list to receive the production build the moment it ships — and to shape the regulated-workflow features that matter most to your team.

Talk to us

Early access

Get the production build the moment it ships.

Leave your name, mailing address, and email and we’ll add you to the A1SI-TERM early-access list — and reach out to shape the regulated-workflow features that matter most to your team.

Request early access

Tell us where to reach you and we'll add you to the early-access list.

A1SI-TERM is in pre-release / early access. Feature scope, availability, pricing, and release timing are subject to change. The 21 CFR Part 11 capabilities — hash-chained session transcripts, Ed25519 signatures, and the § 11.200 e-signature ceremony — are designed to support regulated workflows, but A1SI-TERM is not itself a certified or validated system. Certification of any specific regulated workflow, including legal, compliance, and validation review, remains the customer's responsibility.