A complete platform for secure file transfer — 5 protocols, database filesystem, and enterprise-grade compliance.
Run all five access protocols from a single installation with shared authentication, quotas, and audit trail.
| Capability | SFTP | FTPS (Explicit) | FTPS (Implicit) | WebDAV | Web Portal |
|---|---|---|---|---|---|
| Default port | 22 | 21 | 990 | 9980 | 9980 |
| Encryption | SSH tunnel | AUTH TLS upgrade | TLS from connect | HTTPS (TLS) | HTTPS (TLS) |
| Post-quantum key exchange | Yes (ML-KEM) | — | — | — | — |
| Public key auth | Yes | — | — | — | — |
| MFA (TOTP) | Yes | — | — | — | Yes |
| Shared user database | Yes | Yes | Yes | Yes | Yes |
| Per-user quotas | Yes | Yes | Yes | Yes | Yes |
| Audit trail | Yes | Yes | Yes | Yes | Yes |
| Mount as drive | — | — | — | Yes | — |
| No client software | — | — | — | Yes | Yes |
Connect your existing user directory in minutes. One provider is active at a time — switch by changing a single element in the configuration.
Bind directly to your AD domain. Access rights are derived from group membership — no per-user setup on the server.
Store user accounts in an SQL database. Ships with H2 embedded — upgrade to MySQL, PostgreSQL, or SQL Server at any time.
TOTP (RFC 6238) second factor across every interface — SFTP keyboard-interactive, web portal, and admin console.
Multiple layers of protection ensure only authorized users access your data.
Block malicious traffic before authentication even begins.
Connection → GeoIP check
→ IP block list
→ Rate limiter
→ SSH handshake
→ Authentication
→ Lockout check
→ MFA verification
→ Session granted
Secure defaults with configurable algorithm suites.
Full certificate lifecycle from the admin console.
Users are confined to their home directory with no escape.
Store files directly in SQL for unified access, zero-copy duplication, and simplified backups — no shared network storage required.
The database filesystem stores files and folders with full hierarchical structure. Every protocol — SFTP, FTP, FTPS, WebDAV, and the web portal — sees the same directory tree.
Copy-on-write means duplicating a file is instant and costs zero additional storage until the copy is modified. Ideal for template distribution and file staging workflows.
H2 Embedded, zero-config default
MySQL Driver downloaded at config time
PostgreSQL Driver downloaded at config time
SQL Server Driver downloaded at config time
Schema auto-created on first boot.
Same files visible across all 5 protocols.
Backup = database backup. No file sync.
Four parallel audit sinks capture 15+ event types. Forward to your SIEM, trigger email alerts, or call webhooks in real time.
Full audit trail in sftp_audit with async queue (10,000 capacity). Searchable from the web admin console.
RFC 5424 structured data over UDP. Send events directly to Splunk, Elastic, Graylog, or any SIEM platform.
HTTP POST to any endpoint. Requests are signed with HMAC-SHA256 for tamper-proof delivery verification.
Simple, threshold, and batch notification rules. Powered by SMTP with STARTTLS support.
Per-user bandwidth, transfer events, and session counts — three live charts in the Web Admin's Activities tab, no extra monitoring stack required. Read more ›
Bytes per second per user at 5-second resolution. Y-axis auto-scales between B/s, KB/s, and MB/s.
Range (Last hour / 24h / 7d / 30d) and user filters drive all three charts. Auto-refresh every 10 seconds.
One AtomicLong increment per chunk transfer — about ten nanoseconds. Below measurement noise on the throughput path.
Raw 5-second samples roll up to 1-hour aggregates after 24 hours and age out at 30 days. ~1 MB per active user, steady state.
Give end users a familiar browser interface for uploading and downloading files — no client software, no training required.
Users log in with the same credentials as SFTP and see their home directory. Drag files onto the page to upload, click to download, or select a folder to download as a ZIP archive.
A color-coded quota bar shows remaining storage. Read-only users can browse and download but cannot upload or modify files. MFA enrollment is available from the portal settings page.
GET /portal/api/files?path=/
GET /portal/api/files/tree
POST /portal/api/upload?path=/
GET /portal/api/download?path=/report.pdf
GET /portal/api/download-zip?path=/archive
POST /portal/api/mkdir?path=/new-folder
DEL /portal/api/delete?path=/old-file.tmp
POST /portal/api/rename
POST /portal/api/copy
POST /portal/api/move
GET /portal/api/quota
GET /portal/api/mfa/status
POST /portal/api/mfa/enroll
Access your file transfer space as a mapped drive from Windows Explorer, macOS Finder, or any WebDAV client — no dedicated software required.
WebDAV lets users interact with their SFTP home directory as if it were a local drive. Open, edit, and save files directly from desktop applications like Microsoft Office.
On the database filesystem backend, copy and move operations execute server-side as instant SQL operations — no data transfer over the network.
# Windows — Map Network Drive
net use Z: https://server:443/webdav
# macOS — Finder
Connect to Server → https://server/webdav
# Linux — mount
mount -t davfs https://server/webdav /mnt/dav
Shared auth, quotas, and audit
with SFTP, FTPS, and Portal.
Every management task is available from the command line, the desktop GUI, and the web console — in full parity.
61 commands for scripting, automation, and headless servers. Pipe-friendly output for integration with monitoring tools.
11-tab admin panel with real-time server status, user management, audit viewer, session monitor, and certificate management.
Browser-based admin console on port 9980. 60+ REST API endpoints. No Java on the admin workstation required.
One installer, two platforms. Bundled Java 21 runtime means zero prerequisites.