close

Your infrastructure,
unified.

The desktop and cloud platform for managing

macOS
.dmg
Coming Soon
Windows
.exe
Coming Soon
Linux
.AppImage
Coming Soon
Debian & Ubuntu
Install via apt for automatic updates.
 
Loading install commands…

Cloud app coming soon.

Want early access?

Join the Slack to get notified when the first build drops.

Join Slack →
Infrawrench app overview

Feature tour

Everything your agents and infra team needs

Click a feature to explore. Infrawrench brings together the tools you'd normally need a dozen different apps for.

Manage everything from one place

Connect to 25+ cloud providers and manage hundreds of resource types from a single unified interface. Infrawrench discovers your infrastructure automatically and keeps it in sync every 30 seconds.

  • AWS, GCP, Azure, Cloudflare, DigitalOcean, Hetzner, Scaleway, OVH, and 17 more
  • Automatic resource discovery with background sync, no manual refresh
  • Right-click context menus with provider-specific actions per resource type
  • Drag-and-drop to attach disks, volumes, and Elastic IPs to compute resources
  • Spotlight search (⌘K) across all accounts and resource types at once
Account overview showing resource groups and types

SSH into anything, anywhere

Launch full SSH terminals to any server directly from Infrawrench. No external client needed. On desktop, connections run locally. In the cloud web app, sessions are proxied securely through our WebSocket server.

  • Full terminal with resize, 256-color, and clipboard support
  • Reads keys from ~/.ssh/ or your saved in-app key store
  • One-click SSH from any VM resource (EC2, GCE, Droplet, Hetzner, and more)
  • SSH tunnels: proxy a database port through a bastion host with service presets
  • Windows Pageant SSH agent support on desktop
SSH terminal embedded in a resource detail tab

Full Kubernetes management

Browse, inspect, and manage your Kubernetes clusters. Exec into pods, stream logs, import YAML manifests, and edit live configs. The web app proxies exec sessions so nothing runs locally.

  • Supports any kubeconfig cluster: EKS, GKE, AKS, self-hosted
  • Pod exec / interactive shell (cloud-proxied via WebSocket in the web app)
  • Log streaming for pods, deployments, statefulsets, services, and jobs
  • YAML import (kubectl apply -f equivalent) with multi-document support
  • Monaco manifest editor for live resource config editing
  • Ephemeral scratch pods with configurable TTL (auto-terminated by the cluster)

Query your databases in context

A built-in SQL editor with schema autocomplete, per-resource connection management, and support for a wide range of databases: from traditional PostgreSQL to serverless edge databases.

  • Schema-aware autocomplete via INFORMATION_SCHEMA introspection
  • Per-resource SQL: connect directly to a specific RDS instance, Neon db, or Turso group
  • Supports PostgreSQL, MySQL, Turso/libsql, Databricks, ClickHouse, Cloudflare D1, Spanner
  • Query cost estimation for BigQuery (dry-run API, no quota consumed)
  • Connection strings resolved automatically from resource outputs

Browse and manage object storage

A built-in object storage file browser for S3, GCS, Cloudflare R2, Azure Blob Storage, and DigitalOcean Spaces. Upload, download, create folders, and delete, without leaving the app.

  • Prefix-based folder navigation with breadcrumbs
  • File upload with progress tracking
  • Batch download of multiple objects (desktop)
  • Storage stats: object count and total size on the dashboard card

Pin and monitor your key resources

Build custom dashboards by pinning any resource from any provider. Cards show live stats and status. Set metric thresholds and get native OS notifications when something goes out of range.

  • Drag-and-drop grid layout: pin resources from multiple providers on one dashboard
  • Live stats auto-refresh: table counts, container counts, storage size, and more
  • Metric ping alerts: native OS notification when a metric leaves a min/max range
  • Multiple named dashboards with a configurable default

Manage and export secrets safely

View, rotate, and export secrets from AWS Secrets Manager, GCP Secret Manager, Azure Key Vault, and more. Credentials are encrypted at rest and only decrypted on demand.

  • Secret versions: list, reveal, add, enable, disable, and destroy with one click
  • Credential export: IAM access keys, GCP service account JSON, Azure client secrets, Cloudflare tunnel tokens
  • Kubernetes-ready secret export templates on S3, R2, Cloudflare Tunnel, and more
  • Credentials encrypted at rest. Keys never leave the device (desktop)

Provision resources without leaving the app

Provision VMs, Kubernetes clusters, databases, queues, and buckets with a guided form backed by live data from the provider API. Includes real-time cost estimation, region and size pickers, and SSH key selection.

  • Live cost estimates for EC2, GCE, AKS, Azure VMs, RDS, EBS, and more
  • Region picker: searchable by zone ID, flag, or human-readable location name
  • SSH key picker reads from ~/.ssh/ and your saved key store
  • IAM policy picker with live search and categorised results
  • Supported across AWS, GCP, Azure, DigitalOcean, Hetzner, Kubernetes, and more

Start local, go cloud

Use the desktop app fully offline. Sign in to sync your accounts, resources, dashboards, and credentials to the cloud, kept in sync bidirectionally.

  • Secure sign-in, no passwords stored or transmitted
  • Bidirectional sync every 60 seconds: desktop ↔ cloud
  • API keys for programmatic and CI pipeline access
  • Team management with per-seat billing ($20/seat/month)
  • Full audit trail for all mutations in the cloud app

Cloud-native access

SSH and Kubernetes exec
from your browser

In the cloud web app, terminal sessions are proxied securely through our WebSocket server. No VPN, no local SSH client, no kubeconfig file required. Just sign in and connect.

SSH to EC2, GCE, Droplets, Hetzner servers, and any VM
kubectl exec / interactive pod shells via WebSocket proxy
Real-time pod log streaming directly in the browser
SSH tunnels for proxying databases through a bastion host
All sessions authenticated via your Infrawrench account

Resource wiring

Inputs & outputs connect your cloud

Every resource exposes typed outputs: IPs, connection strings, tokens, kubeconfigs, and more. Wire them as inputs to other resources so everything stays resolved automatically.

Connection string outputs

Databases expose a connectionString output. Link it directly to the SQL editor and it connects automatically. No copy-pasting credentials.

IP address outputs

Compute resources expose publicIp and privateIp outputs. Infrawrench uses these to open an SSH terminal with one click. No manual host entry.

Kubernetes peer outputs

Managed K8s clusters (EKS, GKE, AKS, DOKS) expose a kubeconfig output that automatically links to the Kubernetes plugin, so pods, services, and deployments appear without any manual setup.

Secret outputs

IAM users, service accounts, and app registrations expose credential outputs. Download as JSON, env files, or Kubernetes secrets, or reference them directly from other resources.

Cross-cloud resource wiring

Connect outputs from any AWS resource into another context. An RDS endpoint drives the SQL editor directly, or feed an EKS kubeconfig to the Kubernetes plugin, without touching config files.

Storage access tokens

Object storage resources (S3, R2, GCS, Azure Blob) generate scoped access tokens on demand so the in-app file browser operates without storing long-lived credentials.

Supported providers

24 providers · 225+ resource types across cloud, infrastructure, databases, and more.