Security engineer ships 5-platform SSH client ZestSSH built mostly with Claude Code
ISpeakTheLie · reddit · 2026-11-07
A full-time infosec professional turned a college capstone into ZestSSH, an SSH client for Android, iOS, Windows, Mac and Linux with end-to-end encrypted sync of hosts, keys and snippets (self-hosted Nextcloud/WebDAV, Google Drive, or hosted), plus SFTP, port forwarding, split panes, jump host chains, QR-based team vaults, and a redaction mode for streaming. Built after JuiceSSH died and Termius gated sync behind a subscription.
Claude Code workflow insights:
- Every feature starts as a spec with exact files, code skeletons, and a done-checklist; Claude builds against it and he tests against it
- Mock up screens before writing Flutter code
- Claude proposed the sync encryption design, then agent-based auditing caught the security doc describing backend behavior that wasn't implemented yet
What failed: drag-to-detach desktop windows (Flutter isn't there), big UI changes drift, and Claude agreeing with bad ideas unless asked to argue against him first. Free without an account, one-time upgrades, plans to open source.
More from coding & agent
- Creator apps like Instagram Edits and Roblox Studio are shipping with built-in MCPs for agents — trq212 · 2026-11-07
- Cartesian agent builds a 289-part Dymaxion car 3D model live, researching the design online — carlosbannon · 2026-11-07
- ArkenOS visualizes hundreds of autonomous agents collaborating as a 3D research swarm — _AustinCalvert_ · 2026-11-07
- AI agents blocked by Zillow, Indeed, Reddit — a scraping API got 3/3 through in testing — eyishazyer · 2026-11-07
- Rogue browser extension turns Claude Desktop into a remote shell; Anthropic closed the May report as duplicate — Kyrannio · 2026-11-07
- MCP tool definition drift: how approved tools change silently and how to catch it — BlitzBallBruiser · 2026-11-07