OSH - Zero Trust SSH

Developer Tools

Only for iPhone

Free · Designed for iPhone. Not verified for macOS.

iPhone

OSH turns your iPhone into a hardware-backed approver for zero-trust SSH access. Instead of long-lived SSH keys scattered across laptops, your team's gateway issues short-lived SSH certificates only after a human approves each request. OSH is where that approval happens — on a device you carry, protected by Face ID and the Secure Enclave. HOW IT WORKS • Enroll your device by scanning the gateway's QR code. • When someone requests SSH access, OSH shows you who, what, and where. • Approve or deny with Face ID. Your approval is signed by a key that lives only in the Secure Enclave. • The gateway issues a short-lived certificate — no standing keys, no shared secrets. WHY IT'S SECURE • The signing key is generated inside the Secure Enclave and is non-exportable — it can never leave your iPhone. • Every approval requires biometric authentication. • OSH connects only to the gateway you configure. It has no analytics, no trackers, no ads, and no third-party SDKs. FOR TEAMS • Role-aware: signers, admins, and root see the controls appropriate to them. • Review access rules, approval history, and gateway logs from the app. OSH requires a compatible zero-trust SSH gateway to connect to. If your organization doesn't run one yet, contact us at ad@openlay.com.

  • This app has not received enough ratings or reviews to display an overview.

Notifications - One Notifications screen in Admin: how approvers' phones ring, and where your team hears about requests. - Team channels: add Slack, webhook or Telegram channels from the phone, test them, and sign each change with Face ID. - Tapping a link in a Slack or Telegram message opens the right screen in the app. Phone alerts (root) - Turn on phone alerts through Open Layer's push relay right from the app, without access to the server. - The status now says whether the gateway is waiting for approval, paused, or removed, and root can withdraw or stop and apply again under another name. Security - Every request the app sends to the gateway is signed with a key held on this device. Fixes - Fixed crashes when swiping list rows and when editing a notification channel.

The developer, Open layer technologies L.L.C S.O.C, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .

  • Data Not Collected

    The developer does not collect any data from this app.

    Privacy practices may vary based, for example, on the features you use or your age. Learn More

    The developer has not yet indicated which accessibility features this app supports. Learn More

    Provider
    Open layer technologies L.L.C S.O.C
    Size
    3.7 MB
    Category
    Developer Tools
    Compatibility
    Requires iOS 18.0 or later.
    • iPhone
      Requires iOS 18.0 or later.
    • Mac
      Requires macOS 15.0 or later and a Mac with Apple M1 chip or later.
    • Apple Vision
      Requires visionOS 2.0 or later.
    Languages
    English
    Age Rating
    4+
    Copyright
    © 2026 Open layer technologies L.L.C S.O.C