Note: Terminal emulators are local desktop applications. SSO / OIDC / SAML integration is not applicable – the application itself does not authenticate against an identity provider. A handful of cross-platform clients (Termius, Tabby, Warp) offer cloud sync of host lists and settings tied to a personal account; those are SaaS in the catalogue sense but are not enterprise IdP-integrated.
What Is a Terminal Emulator?
Mix (20 tools)
- License: 16 open source · 4 proprietary
- Hosting: 15 self-hosted · 3 SaaS · 2 both
A terminal emulator is a desktop application that presents a character-cell text interface backed by a local shell, a remote SSH connection, a serial console, or a multiplexer such as tmux or screen. It is the everyday workbench for system administrators, developers, network engineers, and DevOps staff.
Terminal emulators differ from one another along several axes:
- Rendering – CPU vs GPU, text shaping (ligatures, complex scripts), HiDPI handling, latency
- Platform – Linux/X11, Linux/Wayland, macOS, Windows, iOS/Android
- Configuration – text file (TOML, Lua, Python, YAML), GUI preferences, declarative config
- Built-in SSH – the application speaks SSH directly versus
wrapping the OS
sshbinary - Multiplexing – splits, tabs, panes, sessions handled natively
versus delegated to
tmuxorscreen - Remote workflow – saved-host catalogue, keychain integration, port-forward management, jump-host chains
- AI / cloud features – command suggestions, history sync, collaborative sessions
About this data & disclaimer
The information on these pages was researched by a combination of human review and large language models. This catalogue serves as a reference for the resources, applications, devices, deployment payloads, and other components that the ResorsIT platform integrates, deploys, and manages. To suggest an addition or correction, please contact us. Prepared by Rhodium Systems Inc., author of the ResorsIT platform — a unified IT operations management platform for IT teams and MSPs that integrates a curated suite of open-source, commercial, and SaaS applications into a single system with shared identity, single sign-on, access control, and a common audit trail. This information is compiled on a best-effort basis: it may be incomplete, contain errors, and become out of date as tools, vendors, licences, and features change. Use this catalogue only as a starting point for your own research, and independently verify and review any tool carefully against your own requirements before relying on it.
Comparison
Quick reference for choosing a terminal emulator.
Capability Matrix
| Tool | GPU | Lig. | SSH | Tabs | Splits | Sync | Image |
|---|---|---|---|---|---|---|---|
| Ghostty | Y | Y | os | Y | Y | – | Y |
| WezTerm | Y | Y | built-in | Y | Y | – | Y |
| Alacritty | Y | Y | os | – | – | – | – |
| Kitty | Y | Y | os/kitten | Y | Y | – | Y (own) |
| Warp | Y | Y | built-in | Y | Y | cloud | – |
| iTerm2 | Y | Y | os | Y | Y | – | Y |
| Windows Terminal | Y | Y | os | Y | Y | – | Y |
| GNOME Terminal | – | Y | os | Y | – | – | – |
| Konsole | – | Y | os | Y | Y | – | – |
| xterm | – | – | os | – | – | – | – |
| rxvt-unicode | – | – | os | Y (tabbed) | – | – | – |
| Tilix | – | Y | os | Y | Y (tile) | – | – |
| Foot | Y (Wl) | Y | os | – | – | – | Y |
| st | – | – | os | – | – | – | – |
| PuTTY | – | – | built-in | Y | – | – | – |
| MobaXterm | – | – | built-in | Y | Y | – | – |
| SecureCRT | – | Y | built-in | Y | Y | – | – |
| Tabby | partial | Y | built-in | Y | Y | cloud | – |
| Hyper | – | Y | os | Y | Y | – | – |
| Termius | partial | Y | built-in | Y | Y | cloud | – |
Legend: GPU = GPU-accelerated rendering. Lig. = font ligatures. SSH “os” = wraps the OS ssh binary. SSH “built-in” = the app implements SSH itself. Sync “cloud” = optional cloud-synced host list / settings (account-tied, not enterprise IdP). “Image” = inline image protocol (Sixel, Kitty graphics, iTerm2).
Platform Matrix
| Tool | Linux/X11 | Linux/Wayland | macOS | Windows | iOS/Android |
|---|---|---|---|---|---|
| Ghostty | Y | Y | Y | – | – |
| WezTerm | Y | Y | Y | Y | – |
| Alacritty | Y | Y | Y | Y | – |
| Kitty | Y | Y | Y | – | – |
| Warp | Y | – | Y | Y (preview) | – |
| iTerm2 | – | – | Y | – | – |
| Windows Terminal | – | – | – | Y | – |
| GNOME Terminal | Y | Y | – | – | – |
| Konsole | Y | Y | – | (Y, KDE on Win) | – |
| xterm | Y | (XWayland) | (XQuartz) | – | – |
| rxvt-unicode | Y | (XWayland) | (XQuartz) | (cygwin) | – |
| Tilix | Y | Y | – | – | – |
| Foot | – | Y | – | – | – |
| st | Y | (XWayland) | – | – | – |
| PuTTY | (Y, source) | – | – | Y | – |
| MobaXterm | – | – | – | Y | – |
| SecureCRT | Y | Y | Y | Y | – |
| Tabby | Y | Y | Y | Y | – |
| Hyper | Y | Y | Y | Y | – |
| Termius | Y | Y | Y | Y | Y |
License & Pricing Matrix
| Tool | License | Free Tier | Paid Edition |
|---|---|---|---|
| Ghostty | MIT | All features | – |
| WezTerm | MIT | All features | – |
| Alacritty | Apache-2.0 | All features | – |
| Kitty | GPL-3.0 | All features | – |
| Warp | Proprietary | Personal (with quotas) | Team / Pro / Enterprise |
| iTerm2 | GPL-2.0 | All features | – |
| Windows Terminal | MIT | All features | – |
| GNOME Terminal | GPL-3.0 | All features | – |
| Konsole | GPL-2.0+ | All features | – |
| xterm | MIT-style | All features | – |
| rxvt-unicode | GPL-2.0+ | All features | – |
| Tilix | MPL-2.0 | All features | – |
| Foot | MIT | All features | – |
| st | MIT | All features | – |
| PuTTY | MIT | All features | – |
| MobaXterm | Proprietary | Home (12 sessions, 2 tunnels) | Professional licence |
| SecureCRT | Commercial | 30-day trial | Per-seat (often bundled with SecureFX) |
| Tabby | MIT (app) | All app features | Tabby Sync (cloud) – paid |
| Hyper | MIT | All features | – |
| Termius | Proprietary | Single-device, basic SSH | Pro / Team / Enterprise (sync, SSO, audit) |
Configuration Style
| Tool | Config Format | Live Reload | GUI Settings |
|---|---|---|---|
| Ghostty | text (Ghostty config) | Y | partial |
| WezTerm | Lua | Y | – |
| Alacritty | TOML (was YAML) | Y | – |
| Kitty | Python-style INI | Y | – |
| Warp | YAML + GUI | Y | Y |
| iTerm2 | GUI + plist + dotfile | Y | Y |
| Windows Terminal | JSON | Y | Y |
| GNOME Terminal | dconf / GUI | Y | Y |
| Konsole | INI / GUI | Y | Y |
| xterm | X resources | restart | – |
| rxvt-unicode | X resources | restart | – |
| Tilix | dconf / GUI | Y | Y |
| Foot | INI | Y | – |
| st | C source | recompile | – |
| PuTTY | Registry / GUI | Y | Y |
| MobaXterm | INI / GUI | Y | Y |
| SecureCRT | INI / GUI | Y | Y |
| Tabby | YAML / GUI | Y | Y |
| Hyper | JS (.hyper.js) | Y | – |
| Termius | GUI + cloud sync | Y | Y |
Built-in SSH vs OS ssh
The “OS ssh” approach delegates to the system ssh binary (OpenSSH on Linux/macOS/Windows-OpenSSH-built-in). Configuration flows through ~/.ssh/config, ssh-agent, and existing key material. This is the minimalist position: the terminal emulator is just a window.
The “built-in SSH” approach implements SSH inside the application (typically with libssh, Go x/crypto/ssh, or PuTTY’s PSCP/PSFTP codebase). The application owns the host catalogue, key store, and connection state. This is the workstation-management position: the terminal emulator is also an SSH client.
| Approach | Pros | Cons |
|---|---|---|
| OS ssh | Standard config; uses ssh-agent; works with smartcards / FIDO; keys integrate with Vault SSH CA, Smallstep, etc. | No built-in host catalogue; must use ssh -i or config aliases |
| Built-in SSH | App-managed host list; per-app settings; easier for non-CLI users | Separate key store; may lag on new SSH features; harder to integrate with cert-based auth |
In general, “OS ssh” composes best with the existing OpenSSH ecosystem, but Termius and SecureCRT are reasonable for cohorts that need a managed host catalogue.
Cloud Sync Caveat
Cloud sync (Termius, Tabby Sync, Warp) provides a tempting “hosts everywhere” experience but has real implications:
- Hosts and credentials in vendor cloud – internal IPs, hostnames, jump-host topology, sometimes private keys
- End-to-end encryption is the vendor’s claim; verify before trusting with production credentials
- Account is a single point of failure – if compromised, the attacker has a curated list of all your jump hosts
- Opt-in, not enterprise default – recommend keys stay in
ssh-agent/ hardware tokens; use cloud sync only for non-sensitive personal hosts
For privileged access, prefer a PAM tool (Teleport, CyberArk, BeyondTrust) over a terminal-emulator’s cloud sync.
SSO / Centralised Auth
Not applicable to the terminal emulator itself. Centralise shell access through:
- SSH certificate authority – HashiCorp Vault SSH CA,
Smallstep
step-ca, Cloudflare Access, Teleport - Bastion / PAM – Teleport, BastionZero, StrongDM, CyberArk
- OS-level integration – AD-joined hosts via SSSD, Okta Advanced Server Access, JumpCloud
The terminal emulator is unaffected by which of these you choose.
Recommended Defaults
| Cohort | Primary | Secondary | Notes |
|---|---|---|---|
| Linux developer / sysadmin | Ghostty | WezTerm, Kitty | Modern GPU rendering |
| macOS power user | iTerm2 | WezTerm, Ghostty | Established standard |
| Windows admin | Windows Terminal | PuTTY, MobaXterm | MS-supported default |
| Network engineer | SecureCRT | MobaXterm, Tabby | Serial + scripting + logging |
| On-call / mobile | Termius | – | Only credible mobile option |
| AI-assisted shell | Warp | – | Niche; evaluate carefully |
| Wayland minimalist | Foot | Alacritty | Smallest feature surface |
| Suckless / RAM-tight | st | rxvt-unicode | Recompile to configure |
Note on Multiplexers
tmux, screen, zellij, and byobu are not terminal emulators – they run inside a terminal emulator and provide session persistence, splits, and panes at the shell layer. They are out of scope for this category but are commonly paired with the minimalist emulators (Alacritty, Foot, st) that delegate multiplexing rather than implementing it.
Tools
20 tools.
Alacritty
Alacritty is the original GPU-accelerated terminal emulator. First released in 2017, it pioneered the modern wave of GPU-rendered, fast, low-latency terminals.
License: Apache-2.0 (OSS) · Kind: web · Deploy: package · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Vaulted credential
Foot
Foot is a Wayland-native terminal emulator written in C. It is minimalist by design: no tabs, no splits, no built-in SSH, small codebase, fast.
License: MIT (OSS) · Kind: web · Deploy: package · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Vaulted credential
Ghostty
Ghostty is a fast, native, GPU-accelerated terminal emulator released in late 2024 by Mitchell Hashimoto (founder of HashiCorp, creator of Vagrant).
License: MIT (OSS) · Kind: web · Deploy: package · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Vaulted credential
GNOME Terminal
GNOME Terminal is the default terminal emulator for the GNOME desktop, a GTK/VTE- based application with tabs, configurable profiles, Unicode support, and clickable hyperlinks.
License: GPL-3.0-only (OSS) · Kind: web · Deploy: direct · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Vaulted credential
Hyper
Hyper is an Electron-based terminal emulator originally created by Vercel (then known as ZEIT) in 2016. It pioneered the “terminal styled with HTML/CSS, configured with JS” approach.
License: MIT (OSS) · Kind: web · Deploy: package · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Vaulted credential
iTerm2
iTerm2 has been the de-facto power-user terminal emulator on macOS since 2010. It replaced the original iTerm (early 2000s) and has been continuously developed by George Nachman.
License: GPL-2.0-only (OSS) · Kind: web · Deploy: direct · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Vaulted credential
Kitty
Kitty is a feature-dense GPU-accelerated terminal emulator by Kovid Goyal (creator of the Calibre ebook manager).
License: GPL-3.0-only (OSS) · Kind: web · Deploy: package · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Vaulted credential
Konsole
Konsole is the default terminal emulator for the KDE Plasma desktop environment. Like GNOME Terminal it has a long history (early 2000s) and is a feature-competent everyday terminal.
License: GPL-2.0-or-later (OSS) · Kind: web · Deploy: direct · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Vaulted credential
MobaXterm
MobaXterm is a Windows-only “swiss army knife” for connectivity: a tabbed terminal emulator with built-in SSH / Telnet / Rlogin / RDP / VNC / Mosh / Serial / FTP / SFTP, plus a built-in X11 server, plus a cygwin-derived Unix toolset (bash,…
License: Proprietary (proprietary) · Kind: web · Deploy: package · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Vaulted credential
PuTTY
PuTTY is the long-standing free SSH and serial-console client for Windows, written and maintained by Simon Tatham since 1999.
License: MIT (OSS) · Kind: web · Deploy: package · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Vaulted credential
rxvt-unicode (urxvt)
rxvt-unicode (commonly invoked as urxvt) is a fork of the original rxvt terminal emulator, adding Unicode support and Perl-based extensions. It dates from 2003 and remains one of the most lightweight, customisable X11 terminals.
License: GPL-2.0-or-later (OSS) · Kind: web · Deploy: package · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Vaulted credential
SecureCRT
SecureCRT is VanDyke Software’s flagship commercial SSH / serial / telnet client, dating from the late 1990s.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Vaulted credential
st (suckless)
st is the suckless project’s “simple terminal.” Its design ethos is suckless’s standard position: no runtime configuration, no GUI preferences, no IPC, no plugins.
License: MIT (OSS) · Kind: web · Deploy: package · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Vaulted credential
Tabby
Tabby (formerly Terminus) is a cross-platform Electron-based terminal emulator that bundles a tabbed UI, splits, themes, and built-in SSH / Telnet / serial connection management.
License: MIT (OSS) · Kind: web · Deploy: saas · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Vaulted credential
Termius
Termius is a commercial cross-platform SSH client with first-class mobile support, managing a host catalogue, keys, port forwards, and snippets with cloud sync across desktop and mobile devices.
License: Proprietary (proprietary) · Kind: web · Deploy: saas, direct · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Vaulted credential
Tilix
Tilix is a tiling terminal emulator for GTK / GNOME with features inspired by Terminator: arbitrary horizontal / vertical splits, drag-and-drop tile rearrangement, session manager, and a quake-style drop-down mode.
License: MPL-2.0 (OSS) · Kind: web · Deploy: package · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Vaulted credential
Warp
Warp is a commercial GPU-accelerated terminal emulator launched in 2022 with a distinctive “blocks” interface (each command and its output is a discrete editable block) and integrated AI features (natural-language to shell command, error ex…
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Vaulted credential
WezTerm
WezTerm is a GPU-accelerated cross-platform terminal emulator and multiplexer maintained by Wez Furlong.
License: MIT (OSS) · Kind: web · Deploy: package · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Vaulted credential
Windows Terminal
Windows Terminal is Microsoft’s modern terminal application for Windows 10 and 11. It replaces (and supersedes) the legacy conhost.exe for everyday work.
License: MIT (OSS) · Kind: web · Deploy: saas, package · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Vaulted credential
xterm
xterm is the original X Window System terminal emulator, released in 1984. It remains the reference implementation for VT100 / VT220 / VT320 escape-sequence handling and is the implicit baseline that other emulators are tested against.
License: MIT (OSS) · Kind: web · Deploy: package · SSO: none
ResorsIT usage: Web App without SSO
Access & Identity: Forward-auth · Vaulted credential
