Unify storage backends (S3, Azure, GCS) and automate file workflows with a single platform. Deploy on Linux, Windows, Docker, or Kubernetes with the official Helm chart. Manage everything through WebAdmin and REST API, or let your users work directly via WebClient and standard protocols.
A complete file transfer platform — from storage to automation to compliance
Connect to S3, Azure Blob, Google Cloud Storage, or local filesystems using standard SFTP, FTP/S, and WebDAV protocols. Assign different storage backends per user — all managed through a single platform.
Automatically fetch attachments from IMAP mailboxes and route them into user directories. Ideal for receiving invoices, reports, or any file-based workflow that starts with an email.
Map cloud buckets and storage paths to virtual folders within each user's namespace. Define per-path quota limits and permissions for complete isolation between users and projects.
Integrate natively with your Identity Provider — Microsoft Entra ID, Okta, Keycloak, Auth0, and others — via OpenID Connect, for both admins and end-users.
Trigger workflows on uploads, downloads, and schedules. Scan files before publication, send notifications, route files across storage backends, apply PGP encryption, generate scheduled audit reports, and integrate with external systems — using a powerful template engine with 50+ built-in functions.
Manage users, groups, roles, and permissions through an intuitive web interface. The REST API covers both administration and data access. Automate infrastructure provisioning with the official Terraform provider.
Built-in Defender with progressive bans against brute-force attacks, configurable rate limiting, Geo-IP filtering, and allow / block lists — all configurable from the WebAdmin, no external WAF required.
Hybrid key exchange with mlkem768x25519-sha256 protects SFTP transfers against future quantum-capable adversaries today — ahead of the NIST post-quantum timeline that most MFT platforms have yet to meet.
The WebAdmin UI gives you full visibility into users, connections, and storage — while the REST API lets you automate any operation programmatically.
Meet compliance requirements (GDPR, HIPAA, PCI-DSS) with granular access controls, detailed audit logs, and data-at-rest encryption.
Groups and roles simplify management at scale: apply policies once to a group, and delegate administration to specific teams without giving full access.
Users can securely browse, upload, and manage files directly from their browser — no external software required.
Secure Sharing: Create password-protected links with expiration dates and download limits. Recipients can authenticate via email with a one-time code for controlled access.
Document Collaboration: Edit Office documents (DOCX, XLSX, PPTX) directly in the browser with real-time co-authoring, powered by the Collabora Online integration. Files never leave the server.
Self-Service Security: Users manage their own credentials and set up Two-Factor Authentication (2FA) with any TOTP-compatible app.
Run SFTP, FTP/S, and WebDAV on Kubernetes with the official Helm chart. Stateless pods scale horizontally on any storage class, run on read-only filesystems, and stream cloud-backed transfers entirely in memory.
Install on any Kubernetes distribution with a single helm install. Ready-to-deploy managed container offerings are also available on Amazon EKS and ECS via AWS Marketplace, and on Azure AKS via Azure Marketplace.
SSH host keys, TLS certificates, and ACME data live in the database. Pods scale horizontally on any storage class — no shared volumes required.
Cloud-backend uploads and downloads stream entirely through RAM, never spilling to disk. Pods run unchanged on read-only filesystems and minimal hardened images that ship without a writable temp directory.
Prometheus metrics per user, per backend, and per filesystem operation. Ready-to-use Grafana dashboard and a /healthz endpoint wired to liveness and readiness probes.
Secure file transfer for any workflow, any industry
Replace manual file handoffs with automated workflows. When a partner uploads a file, SFTPGo can encrypt it, route it to the right storage, notify your team, and trigger downstream processing — all without human intervention.
Need to send files to people outside your organization? Give them a secure link — no accounts or software to install. Control access with passwords or email authentication, expiration dates, download limits, and IP restrictions.
Your team uses SFTP but your data lives in S3, Azure Blob, or Google Cloud Storage? SFTPGo bridges the gap — users connect with their existing tools while files go directly to cloud storage. No migration, no retraining.
Facing HIPAA, GDPR, or PCI-DSS requirements? SFTPGo provides the controls auditors look for: detailed audit trails, encryption, multi-factor authentication, and antivirus scanning. Developed by an ISO 27001-certified company.
From space agencies and asset managers to MSPs and healthcare networks, SFTPGo runs in production across nearly every regulated industry.
Ready to go in minutes. We host and manage the infrastructure for you.
Store your data securely in the cloud and access it via SFTP, FTPS, WebDAV, or WebClient.
Ideal for teams who want zero maintenance.
Download and run SFTPGo on your own servers (Linux, Windows, Docker, Kubernetes). Full control over your infrastructure, your data, and your compliance boundaries. Includes all enterprise features and direct support from the authors.
License PricingBuilt on a proven open-source foundation. Enterprise editions extend the core with advanced automation, cloud backends, compliance tools, and dedicated support.
Trusted across aerospace, finance, healthcare, MSPs — among many others
