Evidence tier Source Confirmed · 1 capture on record
What the publisher says
As described on Microsoft Marketplace.
SFTPGo is an open-source, self-hosted file transfer and storage management platform that provides secure access to files through multiple protocols, including SFTP, FTP/S, WebDAV, and HTTP/S. It enables organizations and individuals to manage users, permissions, virtual folders, quotas, and file-sharing operations from a centralized web-based administration interface. SFTPGo supports both local storage and cloud object storage backends, allowing files to be stored on local disks or integrated with services such as Amazon S3, Google Cloud Storage, Azure Blob Storage, and other S3-compatible storage providers. It can be deployed on local systems, private servers, virtual machines, containers, Kubernetes clusters, and cloud infrastructure.
SFTPGo is designed for businesses, IT administrators, managed service providers, developers, and organizations that require secure file transfer, storage management, and controlled file access. It supports user management, storage quotas, virtual folders, event notifications, file-sharing capabilities, and REST APIs for automation and integration. Through its web-based administration and user portals, SFTPGo simplifies file management while maintaining strong security controls and flexibility across different storage backends.
Show the rest of the publisher’s description (33 more lines)
Key Features of SFTPGo:
- Open-source and self-hosted secure file transfer platform.
- Supports SFTP, FTP/S, WebDAV, and HTTP/S protocols.
- Provides a web-based administration interface for user and system management.
- Supports local filesystem storage and cloud object storage backends.
- Integrates with Amazon S3, Google Cloud Storage, Azure Blob Storage, and S3-compatible storage.
- Provides user accounts with granular permissions and access controls.
- Supports virtual folders and storage abstraction.
- Enables storage quotas for users and groups.
- Provides secure file sharing and file management capabilities.
- Supports multi-user environments and delegated administration.
- Includes REST APIs for automation and external integrations.
- Supports event notifications and workflow automation.
- Offers detailed logging and auditing capabilities.
- Supports database backends including SQLite, MySQL, PostgreSQL, and BoltDB.
- Provides built-in authentication and authorization mechanisms.
- Supports TLS encryption for secure communications.
- Can be deployed using Docker and containerized environments.
- Suitable for secure file transfer, cloud storage gateways, managed file transfer, backup repositories, and enterprise file-sharing solutions.
- Can be deployed on local systems, private servers, virtual machines, Kubernetes environments, and cloud infrastructure.
SFTPGo Usage:
$sudo su
$systemctl status sftpgo
Check SFTPGo Version:
$sftpgo --version
Restart SFTPGo:
$systemctl restart sftpgo
Access SFTPGo Web Admin:
http://server-ip:8080
Create Admin User:
$sftpgo admin create --username admin --password 'StrongPassword@123'
Disclaimer:
SFTPGo is an open-source software project developed and maintained by its respective community and contributors. SFTPGo is not affiliated with or endorsed by any cloud storage provider or operating system vendor. Compatibility with specific storage backends, databases, operating systems, container platforms, Kubernetes environments, and cloud providers may vary depending on the configuration and version being used.
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Compliance
- FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Vendor
External enrichment · as of 2026-08-29
Reconciled on 9/3/2026
Sources
Publisher resources
1 linkLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.