Flexible Authentication
Plug in any identity source with a single configuration change.
- Active Directory / LDAP bind
- JDBC database (H2, MySQL, PostgreSQL, SQL Server)
- SSH public key authentication
- TOTP multi-factor authentication
Enterprise file transfer server with five access protocols — SFTP, FTP, FTPS, WebDAV, and a browser-based portal. Active Directory integration, multi-factor authentication, and database filesystem — all with zero-configuration defaults.
From authentication to audit, Stylus SFTP Server covers the entire file transfer lifecycle with enterprise-grade security.
Plug in any identity source with a single configuration change.
Atomic uploads with staging, deduplication, and orphan cleanup ensure every file arrives intact.
Four parallel audit sinks capture every event for compliance and forensics.
End users upload and download files from any browser — no client software required.
Store files directly in your SQL database for unified access across all five protocols.
Mount your file transfer space as a network drive from any operating system.
Multiple layers of protection block threats before they reach your data.
Manage your server your way — command line, desktop GUI, or web console.
Stylus SFTP Server ships with sensible defaults. Install, start, connect.
The self-contained installer bundles a Java 21 runtime, so there are no prerequisites. Choose GUI or silent mode.
On Windows it registers as an NT service. On Linux it creates a systemd unit. Either way, the server starts automatically on boot.
java -jar stylus-sftp-server-installer.jar ^
C:\StylusSFTPServer ^
C:\ProgramData\StylusSFTPServer ^
--port 22 --provider jdbc
Installing Stylus SFTP Server...
Generated host keys (RSA, ECDSA, Ed25519)
Created database schema
Registered Windows service
Installation complete.
Switch between authentication providers with a single XML element. Active Directory groups automatically map to SFTP permissions — no per-user configuration on the server.
Multi-factor authentication adds TOTP verification across SFTP, the web portal, and the admin console.
<user-manager>
<provider>ldap</provider>
<ldap>
<url>ldaps://dc.corp.local:636</url>
<search-base>DC=corp,DC=local</search-base>
<bind-dn>CN=svc-sftp,OU=Svc</bind-dn>
</ldap>
</user-manager>
<!-- Map your AD groups to access levels:
<access-groups> → read-write
<read-only-groups> → read-only -->
Every connection, login, upload, and download is recorded to up to four audit sinks simultaneously. Set up email notifications, syslog forwarding, or webhook integrations.
The web admin console provides a real-time dashboard, session viewer, and searchable audit log.
AUTH_SUCCESS jsmith 192.168.1.50
UPLOAD report-Q1.xlsx 2.4 MB
DOWNLOAD invoice-4821.pdf
MFA_ENROLL jsmith
AUTH_FAILURE unknown 45.33.22.11
GEO_BLOCKED 45.33.22.11 CN
→ Database + Log + Syslog + Webhook
Run all five access protocols from a single installation with shared authentication, quotas, and audit.
| Capability | SFTP | FTPS (Explicit) | FTPS (Implicit) | WebDAV | Web Portal |
|---|---|---|---|---|---|
| Default port | 22 | 21 | 990 | 9980 | 9980 |
| Encryption | SSH tunnel | AUTH TLS upgrade | TLS from connect | HTTPS (TLS) | HTTPS (TLS) |
| Post-quantum key exchange | Yes (ML-KEM) | — | — | — | — |
| Public key auth | Yes | — | — | — | — |
| MFA (TOTP) | Yes | — | — | — | Yes |
| Shared user database | Yes | Yes | Yes | Yes | Yes |
| Per-user quotas | Yes | Yes | Yes | Yes | Yes |
| Audit trail | Yes | Yes | Yes | Yes | Yes |
| Mount as drive | — | — | — | Yes | — |
| No client software | — | — | — | Yes | Yes |