Terminal access your security team can actually approve.
Dendrite is the collaborative terminal platform for engineering teams. Share live shell sessions with authenticated colleagues - self-hosted, air-gap capable, and audit-ready by design.
Community edition is free · macOS, Linux & Windows
Built for teams, engineered for compliance
Dendrite gives engineering managers visibility and CTOs a defensible security posture - without slowing the people in the shell.
Live shared sessions
Multiple authenticated engineers work in the same shell in real time - pairing on deploys, debugging incidents together, or reviewing changes side-by-side. No screen sharing, no credential handoffs.
LDAP & SSO integration
Authenticate against your existing directory. Identity, group membership, and access policies flow from your LDAP or SSO provider - no parallel user database to secure or reconcile.
Just-in-time approvals
Access is granted for the session that needs it, not permanently. Session hosts approve collaborators on demand, and view-only mode lets reviewers observe without touching production.
Complete audit logging
Session creation, joins, approvals, and view-only changes are recorded server-side. Export audit trails for compliance evidence, incident reviews, and change-management processes.
Least-privilege by default
Every session runs on a host you designate, enforced server-side. View-only locks apply instantly to all attached clients - observers watch, but cannot type, paste, or scroll beyond policy.
Deploy anywhere
Self-hosted in your VPC, on bare metal, or fully air-gapped. Dendrite's coordination layer never executes commands on your behalf - your hosts stay behind your firewall.
One command to your first session
No daemons to babysit. No config files to decipher. The full guide lives in the documentation.
$ curl -fsSL https://dendrite.sh/install.sh | shAlso available via brew install kazlabs/tap/dendrite and winget install KazLabs.Dendrite
Every screen, one product
From sign-in to live collaboration - the workflow your engineers already know, with the controls your auditors expect.
Plans that scale with your rollout
Start free with your core team. Add directory integration when you need it. Enterprise covers regulated and air-gapped environments.
Community
For small teams and evaluation
Free, forever
- Up to 5 hosts and 5 users
- Live shared sessions & chat
- View-only mode
- 7-day audit log retention
- LDAP / SSO integration
Small Teams
For growing engineering orgs
15 hosts, plus $10 per extra user
- 15 hosts, unlimited users
- Everything in Community
- Just-in-time approvals
- LDAP integration
- 30-day audit log retention
Professional
For production engineering teams
50 hosts, plus $18 per extra user
- 50 hosts, unlimited users
- Everything in Small Teams
- Priority support
- 90-day audit log retention
- Audit log export
Enterprise
For regulated and critical infrastructure
Annual agreements
- Unlimited hosts and users
- All the bells and whistles
- Self-hosted & air-gap capable
- Custom retention & policies
- Dedicated support & SLA
Frequently asked questions
Where does Dendrite run? Do commands touch your cloud?
No. Sessions execute only on hosts you register - in your VPC, on-prem, or fully air-gapped. Dendrite's coordination layer brokers authenticated connections; it never executes commands on your behalf.
How does Dendrite integrate with our identity provider?
Professional and Enterprise plans authenticate against your LDAP directory or SSO provider, so user lifecycle is managed where it already is. Enterprise adds SCIM for automated provisioning and de-provisioning.
What does the audit log capture?
Session creation, collaborator joins and approvals, view-only changes, and sign-in events are recorded server-side and exportable - the evidence trail your compliance processes need.
Can we restrict who can type in a session?
Yes. The session host can enable view-only mode, enforced on the server immediately - all attached observers lose input capability at once. Just-in-time approvals control who joins at all.
Is Dendrite suitable for telco and critical infrastructure (CII) environments?
That is a design goal. Self-hosted and air-gap-capable deployment, directory-based authentication, least-privilege session controls, and audit logging are built for compliance-sensitive operators. Compliance certifications are on the roadmap as the platform matures.
What does the free Community edition include?
Up to 5 hosts and 5 users with live shared sessions, chat, and view-only mode - free forever. Directory integration and audit exports are Professional features.
Roll out secure terminal collaboration this quarter
Install the Community edition in minutes, or talk to us about a production deployment.