YACM

One connection manager for the newest
and the oldest gear

YACM is a free, open-source SSH, telnet and serial console manager for network engineers and for teams that look after hundreds or thousands of devices.

Download Read the user guide

Windows 10 and 11 · macOS 13 or newer · Linux · no installation, no account, no telemetry

YACM: a session tree with data centre, branch and lab groups and a team library next to a Cisco IOS XE session

Built for teams and large networks

The things that matter when many people share many devices.

Team libraries

Publish a group of sessions as one file on a share or in git. Colleagues see the same devices, read-only, and log in with their own accounts. Libraries never contain passwords.

Credential profiles

One login for many sessions. When your directory password changes, change it once. Profiles also fill in telnet and serial logins.

Group defaults and bulk edits

A group gives its sessions a login, a jump host, an algorithm profile and colours. Move a site behind a new bastion by changing one group.

Find among thousands

One field filters the tree and connects; Go to session ranks matches among thousands of sessions and remembers the ones you opened last.

Import what you have

SecureCRT, Xshell, MobaXterm, mRemoteNG, PuTTY, Ásbrú, ssh config, CSV and Excel lists, and NetBox. Saved passwords go into the vault.

Type to many, saved commands

Send the same commands to several sessions, keep a library of commands per vendor, and highlight errors and alerts in every session.

Old and new devices, through any path

From post-quantum SSH to a console cable.

SSH

Modern and post-quantum algorithms by default, compatible and legacy profiles for older gear, keys, agents, .ppk files and certificates, host key checks on every hop.

Telnet

For the devices that never learnt SSH, with login automation and telnet break.

Serial consoles

Any baud rate and line setting, USB adapters by name, break for ROMMON and password recovery.

Jump hosts

Chains of jump hosts with their own logins and MFA prompts, per session or for a whole group.

Files and file servers

A Files tab for SFTP and SCP with MD5 checks, command output to a file through the session, and TFTP, HTTP and SCP servers with the copy command written for Cisco, Arista, Juniper and Linux.

Tunnels

Local, remote and dynamic port forwards, a SOCKS and HTTP proxy, and tunnels that bring the file servers to devices behind a jump host and to servers behind a VPN.

See it at work

Real sessions against the YACM demo device.

Type to many: one command sent to four sessions in a 2x2 split view — **Type to many.** One command to four devices in a split view.

Files tab: an IOS XE image sent to flash: with the MD5 check — **Files tab.** On the session's own SSH connection, with the MD5 check.

File servers: TFTP running and the copy command written for Cisco IOS XE — **File servers.** YACM writes the copy command and types it into the session.

A team library session that now points to another address: YACM asks before connecting — **Team libraries.** YACM asks before your login goes to a changed address.

Secure by default

Made for regulated networks: YACM helps you meet NIS2, ISO 27001 and PCI DSS. Security and compliance details

Passwords only in an encrypted vault (AES-256-GCM, Argon2id), locked after 15 idle minutes
No telemetry; the update check is off unless you switch it on
Host keys checked on every hop; changed keys are a warning
Secrets masked in session logs
Team libraries without passwords; foreign tunnels switched off
Public source, SBOM and build provenance for every release
Signed and notarised macOS app
Published vulnerability process: security@yacm.app

One connection manager for the newestand the oldest gear