How it works
An app on your devices, a small program on each server, and nothing of ours in between.
hewy.app, our server, sits off to the side: it carries sealed notifications, sealed sync between your devices, and sealed messages between your servers. It never carries your chats, files or code.
Your Mac, iPhone and Android phone connect to each server over SSH, as a terminal app does, with the server's identity remembered and checked every time. Nothing goes through our servers. Each device has its own SSH key, made in its secure hardware (the Secure Enclave on Apple devices, the Android Keystore on Android), so it can't be copied off the device.
A small program in your account on the server. It holds your chats, terminals and schedules, so they keep going when your laptop closes or your phone sleeps, and any of your devices can pick them up. It never opens a network port: the app reaches it through SSH. Every release is signed with a key kept offline, and the app checks the signature before installing it. Set it up by hand →
On Linux, each agent runs inside bubblewrap. It can work on your files, but can't reach the daemon, its settings, or the API keys on the server, and you can hide the account's SSH keys from it too. You choose, per chat, whether it asks before each command (Ask), asks only for risky ones (Auto), or just works (Full).
Your agent can look at web pages for itself, your dev site, a dashboard, a store console, the replies to a post, and click through them as a user would, so it checks its own work instead of waiting on your screenshots. The browser it uses is in the Hewy app on your Mac or Android phone, and soon your iPhone: not on the server, and not on ours. A server is never signed in to anything, and many sites turn its requests away; your device is signed in, because you signed in. The agent asks through the Hewy Daemon, which passes the request over your app's own SSH connection, and the app does the reading and clicking, if you've allowed it. Close the app and the agent can't use the browser. Nothing goes through hewy.app. How it's kept safe →
When an agent asks to run something, your iPhone, Mac or Android phone shows exactly what, and your answer is signed with a key that needs Face ID, Touch ID, your fingerprint or your passcode. The daemon only accepts a signed answer, once, and only for what was shown.
Your server encrypts each notification for your devices before it leaves. Our push service and Apple carry only that ciphertext, and see "Open Hewy" at most.
Nothing is connected until you connect two chats, and you choose which way, what can travel and for how long. A message goes from one server to the other through an app of yours that's open, or, when none is, sealed through our relay for the receiving server alone. Each server has its own keys, which only your devices introduce to each other.
Your server list, saved passwords, API keys and snippets sync between your devices, encrypted on the device first with a key that comes from your master password, which never leaves your device. Every change is signed by the device that made it.
Free for 14 days, then US$99 a year or US$9.99 a month.
Get it forAndroidMacComing soon foriPhoneSee what it does →