Three forwarding modes
Create local forwarding, remote forwarding and a local SOCKS proxy without rebuilding SSH commands each time.
NATIVE MACOS SSH CONNECTION MANAGER
Secure Pipes
Private and secure connectivity for macOS clients and servers.
Build local and remote port forwards, run a local SOCKS endpoint, and keep connection profiles organized in one focused Mac app.
Quick install · Homebrew
brew install --cask secure-pipesmacOS 12 or later · Apple silicon and Intel
One place for the tunnels you operate
Secure Pipes wraps established SSH workflows in a native macOS interface while keeping connection state, logs and controls visible.
Profiles and host presets
Reuse server details, organize connections with tags, and control a group together when the work calls for it.
Visible connection state
Follow each connection through start, reconnect and stop, with its own logs and traffic view.
SSH trust stays explicit
Host-key verification remains part of the connection flow. Passwords and license details are stored in macOS Keychain.
SFTP file transfers
Browse remote directories and manage uploads and downloads in a transfer queue.
Local SSH config host aliases
Browse host aliases from your local SSH config and included files without changing them.
AppleScript and spcli automation
Start, stop and check saved connections with AppleScript or the spcli command-line tool.
Transparent Proxy (Experimental)
Use a transparent proxy through a macOS system extension that requires installation and system approval.
Start free. Remove operating limits with Pro.
Core SSH security and forwarding remain available in Free. Sharing, WebDAV backup and restore, OTP app unlock setup, post-connect actions, automation, jump hosts and proxy tools share one 7-day trial; Pro also removes limits on saved records, groups and active connections.
| Capability | Free Edition | Pro Edition |
|---|---|---|
| Local port forwarding | Included | Included |
| Remote port forwarding | Included | Included |
| SOCKS proxy | Included | Included |
| Password and identity-file authentication | Included | Included |
| SSH keyboard-interactive authentication1 | Included | Included |
| FIDO2 security key authentication2 | Included | Included |
| SSH host-key verification | Included | Included |
| Automatic reconnection | Included | Included |
| Connect automatically when the app launches | Included | Included |
| Custom SSH options | Included | Included |
| Group batch controls | Included | Included |
| Per-connection logs | Included | Included |
| Per-connection traffic statistics | Included | Included |
| Settings backup and password restore | Included | Included |
| Language, theme and window preferences | Included | Included |
| Open Console | Included | Included |
| SFTP file transfers | Included | Included |
| Master password and Touch ID unlock | Included | Included |
| Local Unix socket forwarding | Included | Included |
| Remote Unix socket forwarding | Included | Included |
| Capability | Free Edition | Pro Edition |
|---|---|---|
| Saved connection profiles3 | Up to 10 | Unlimited |
| Saved host presets | Up to 3 | Unlimited |
| Group connections by tags | Up to 3 distinct tags | Unlimited |
| Active local forwarding connections | Up to 2 | Unlimited |
| Active remote forwarding connections | Up to 2 | Unlimited |
| Active SOCKS proxy connections | Up to 2 | Unlimited |
| Local SSH config host aliases | Up to 10 host aliases | Unlimited |
| AppleScript automation | 7-day trial4 | Included |
| spcli command-line automation | 7-day trial4 | Included |
| Open URL / VNC after connecting | 7-day trial4 | Included |
| Run scripts after connecting | 7-day trial4 | Included |
| Share and restore connections | 7-day trial4 | Included |
| WebDAV backup and restore | 7-day trial4 | Included |
| Set up OTP app unlock | 7-day trial4 | Included |
| Sequential jump hosts | 7-day trial4 | Included |
| Transparent Proxy (Experimental)5 | 7-day trial4 | Included |
| Open proxy browser6 | 7-day trial4 | Included |
| UDP over SSH | 7-day trial4 | Included |
| SSH multi-session acceleration | 7-day trial4 | Included |
| Local / remote multi-port forwarding | 7-day trial4 | Included |
- 1Responds to server-requested OTP codes (including TOTP) and second-factor (2FA) prompts after password or key authentication. Secure Pipes does not generate codes; available methods depend on the SSH server.
- 2FIDO2 requires a compatible security key, SSH server, and local device access. Availability depends on the specific setup.
- 3Records saved in earlier versions remain available even above the new Free limits. If Pro is removed or expires, existing records remain visible, editable, exportable and removable; Secure Pipes does not delete them. Free limits apply to new records and connection starts.
- 4After the shared 7-day trial ends, trial features require Pro. TCP SOCKS remains available with one SSH session. UDP over SSH and acceleration with up to 8 SSH sessions use this same trial. UDP requires Python 3 on the server and your permission to run the relay script. Trial share QR codes are valid for one hour; custom validity requires Pro.
- 5Transparent Proxy (Experimental) requires a macOS system extension and system approval.
- 6Opening the proxy browser requires Chrome or Edge.
Secure Pipes Pro EditionOne-time license for the current major version
Buy Pro Buying for a team or organization?
Volume purchase Each license covers one Mac. Tax included. Minimum 5 licenses.
Download Secure Pipes Free Edition
The official macOS download includes the complete secure connection workflow. Pro Edition can be unlocked in the app.
Checking the latest release…