Monitor Linux servers and containers directly from your Mac menu bar.

Point-to-point TLS connection. Real-time CPU, memory, disks, network, Docker container states, and systemd units. No cloud intermediary, no telemetry.

Download for macOS GitHub
Linux agent install: curl -fsSL https://raw.githubusercontent.com/miftahganzz/Pulse/main/agent/pulse-agent/scripts/install.sh | sudo bash
Capabilities

Linux server control in a native desktop client.

Pulse connects a native Swift macOS client directly to a Go daemon on your host without web wrappers.

Live Telemetry

WebSocket streaming updates every second for CPU load, memory distribution, disk partitions, and network I/O with historical sparklines.

Docker Containers

Inspect container states, memory usage, and port mappings. Restart, stop, or stream container stdout and stderr in real time.

Systemd Units

Monitor background services (Nginx, PostgreSQL, Caddy, custom units). Inspect journalctl logs, reload configs, and manage daemons.

Port Auditor

Socket inspection detects open TCP listening ports, identifies public 0.0.0.0 bindings, and checks UFW or firewalld rules.

Zero Cloud Relay

Encrypted point-to-point connection. Connect via LAN, public IP, Tailscale private mesh, or Cloudflare Tunnel with zero open inbound ports.

Maintenance Runbooks

Single-action commands to vacuum system journals, prune unused Docker images, flush local DNS caches, and inspect disk space.

Installation

One command to install. Select your network topology.

Supports Debian, Ubuntu, RHEL, CentOS, Fedora, Arch, Alpine, openSUSE, and any systemd Linux. Available in root and non-root user modes.

curl -fsSL https://raw.githubusercontent.com/miftahganzz/Pulse/main/agent/pulse-agent/scripts/install.sh | sudo bash
Downloads static binary for your architecture (x86_64 or arm64).
Generates TLS certificates and configures systemd service.
Adjusts firewall (UFW, firewalld, iptables) for port 9876.
Generates temporary pairing code valid for 10 minutes.
curl -fsSL https://raw.githubusercontent.com/miftahganzz/Pulse/main/agent/pulse-agent/scripts/setup-tailscale.sh | sudo bash
Binds Pulse exclusively to the host Tailscale interface (100.x.y.z).
No public ports are opened. Accessible only by devices in your private Tailnet.
Encrypted WireGuard transport with automatic roaming.
curl -fsSL https://raw.githubusercontent.com/miftahganzz/Pulse/main/agent/pulse-agent/scripts/setup-cloudflare.sh | sudo bash
Establishes an outbound-only Cloudflare quick tunnel without opening incoming ports.
Provides a trycloudflare.com URL or your configured domain.
Persistent keepalive and edge SSL termination.
Specifications

Architecture details

Resource footprints and operational characteristics.

macOS Client Native Swift 6, SwiftUI, Menu Bar Extra, Sparkle 2 updater, local Keychain storage
Linux Agent Static Go binary (~7 MB file size, ~15 MB RAM usage, 0% idle CPU)
Transport TLS 1.3 / WebSocket with active keepalive ping and auto-reconnect
Pairing Security Temporary code (10-min TTL), rate-limiter lockout, TOFU certificate pinning
Compatibility macOS 13.0+ (Ventura, Sonoma, Sequoia), Linux kernel 4.4+ (x86_64, arm64)
Telemetry Zero. All metrics remain on your own machines
Questions

Frequently asked questions

Specific details on security, networking, and installation.

No. Communication is strictly point-to-point. Your Mac connects directly to the agent over TLS, or through your own Tailscale or Cloudflare tunnel. We operate zero cloud relays and collect zero analytical telemetry.

Yes. Standalone non-root user mode installs the binary to ~/.local/bin and configures a user-level systemd service (systemctl --user) or crontab @reboot persistence without sudo.

Running "pulse pair" on the server displays a temporary 6-character code that expires in 10 minutes. Enter this code into Pulse on macOS. The app pins the server TLS certificate fingerprint and stores the authentication token locally.

Any modern Linux distribution with systemd or crontab, including Ubuntu, Debian, CentOS, RHEL, Rocky Linux, Fedora, Arch Linux, Alpine Linux, and openSUSE on x86_64 and arm64 architectures.

Yes. Both the macOS application and Linux agent source code are licensed under the MIT License on GitHub.

Copied to clipboard