Unify storage backends (S3, Azure, GCS) and automate file workflows with a single platform. Deploy on Linux, Windows, Docker, or Kubernetes with the official Helm chart. Manage everything through WebAdmin and REST API, or let your users work directly via WebClient and standard protocols.
A complete file transfer platform — from storage to automation to compliance
Connect to S3, Azure Blob, Google Cloud Storage, or local filesystems using standard SFTP, FTP/S, and WebDAV protocols. Assign different storage backends per user — all managed through a single platform.
Automatically fetch attachments from IMAP mailboxes and route them into user directories. Ideal for receiving invoices, reports, or any file-based workflow that starts with an email.
Map cloud buckets and storage paths to virtual folders within each user's namespace. Define per-path quota limits and permissions for complete isolation between users and projects.
Integrate natively with your Identity Provider — Microsoft Entra ID, Okta, Keycloak, Auth0, and others — via OpenID Connect, for both admins and end-users.
Trigger workflows on uploads, downloads, and schedules. Scan files before publication, send notifications, route files across storage backends, apply PGP encryption, generate scheduled audit reports, and integrate with external systems — using a powerful template engine with 25+ built-in functions.
Manage users, groups, roles, and permissions through an intuitive web interface. The REST API covers both administration and data access. Automate infrastructure provisioning with the official Terraform provider.
Built-in Defender with progressive bans against brute-force attacks, configurable rate limiting, Geo-IP filtering, and allow / block lists — no external WAF required.
Hybrid key exchange with mlkem768x25519-sha256 protects SFTP transfers against harvest-now, decrypt-later attacks: traffic captured today stays protected when quantum computers arrive.
The WebAdmin UI gives you full visibility into users, connections, and storage — while the REST API lets you automate any operation programmatically.
Support your compliance programs (GDPR, HIPAA, PCI-DSS) with granular access controls, detailed audit logs, and data-at-rest encryption.
Groups and roles simplify management at scale: apply policies once to a group, and delegate administration to specific teams without giving full access.
Users can securely browse, upload, and manage files directly from their browser — no external software required.
Secure Sharing: Turn any file or folder into a link, then choose how to protect it: with a password you pass on to the recipient, or with email authentication, where only the addresses you list can request a one-time access code. Either way, every link can carry an expiration date and a download limit.
Document Collaboration: Edit Office documents (DOCX, XLSX, PPTX) directly in the browser with real-time co-authoring, powered by our Collabora Online integration. Documents stay inside your own infrastructure — nothing is sent to a third-party cloud.
Self-Service Security: Users manage their own credentials and set up Two-Factor Authentication (2FA) with any TOTP-compatible app.
Run SFTP, FTP/S, and WebDAV on Kubernetes with the official Helm chart. Stateless pods scale horizontally on any storage class, run on read-only filesystems, and stream cloud-backed transfers entirely in memory.
Install on any Kubernetes distribution with a single helm install. Ready-to-deploy container offerings are also available on Amazon EKS and ECS via AWS Marketplace, and on Azure AKS via Azure Marketplace.
SSH host keys, TLS certificates, and ACME data live in the database. Pods scale horizontally on any storage class — no shared volumes required.
Cloud-backend uploads and downloads stream entirely through RAM, never spilling to disk. Pods run unchanged on read-only filesystems and minimal hardened images that ship without a writable temp directory.
Prometheus metrics per user, per backend, and per filesystem operation. Ready-to-use Grafana dashboard and a /healthz endpoint wired to liveness and readiness probes.
Secure file transfer for any workflow, any industry
Replace manual file handoffs with automated workflows. When a partner uploads a file, SFTPGo can encrypt it, route it to the right storage, notify your team, and trigger downstream processing — all without human intervention.
Need to send files to people outside your organization? Give them a secure link — no accounts or software to install. Control access with a password or with email authentication, then add expiration dates, download limits, and IP restrictions.
Your team uses SFTP but your data lives in S3, Azure Blob, or Google Cloud Storage? SFTPGo bridges the gap — users connect with their existing tools while files go directly to cloud storage. No migration, no retraining.
Facing HIPAA, GDPR, or PCI-DSS requirements? SFTPGo provides the controls auditors look for: detailed audit trails, encryption, multi-factor authentication, and antivirus scanning through any ICAP server — bring your own, or ask us for ours, available on request today with general availability coming. Developed by an ISO 27001-certified company.
From aerospace and defense to HPC research centers, asset managers, MSPs, and healthcare networks, SFTPGo runs in production across highly regulated industries.
Ready to go in minutes. We host and manage the infrastructure for you.
Store your data securely in the cloud and access it via SFTP, FTPS, WebDAV, or WebClient.
Ideal for teams who want zero maintenance.
Download and run SFTPGo on your own servers (Linux, Windows, Docker, Kubernetes). Full control over your infrastructure, your data, and your compliance boundaries. Includes all enterprise features and direct support from the authors.
License PricingBuilt on a proven open-source foundation. Enterprise editions extend the core with advanced automation, cloud backends, compliance tools, and dedicated support.
Trusted across aerospace, finance, research, healthcare, and MSPs — among many others
