Secure File Sharing You Can Count On Anywhere, Anytime

Compliant Data Center

FTP Today’s data center partner Peak 10 undergoes annual Type II SOC 1 and SOC 2 audits under SSAE 18, as well as audits under ISAE 3402 and AT-101 audit standards. Our data center is also certified under ISO/IEC 27001:2013, an auditable international standard that formally outlines requirements for an Information Security Management System (ISMS) to help protect and secure an organization’s data.

Enterprise Grade Infrastructure

The FTP Cloud™ runs on a high availability (HA), enterprise-grade cloud infrastructure (VMware/Cisco/EMC) located at Peak 10 in Louisville, Kentucky. Peak 10's infrastructure is designed for production workloads, business-critical data and applications, reliability and performance. The infrastructure is HIPAA-ready, PCI-DSS certified and VISA approved.

Dedicated Firewalls

FTP Today's production virtual machines (VMs) are protected, both internally and externally, by two hardware firewalls in an active-active fail-over configuration. This provides FTP Today with a Virtual Private Data Center (VPDC) that is completely isolated from other customers on Peak 10's cloud infrastructure — and creates what we call The FTP Cloud™.

All traffic must pass through these firewalls to reach our Internet-facing server IP addresses. Our firewalls provide accelerated security throughput at gigabit line speed and can handle up to 400,000 concurrent sessions.

High Availability Servers

Like their hardened data center facilities, Peak 10’s multiple cloud infrastructure clusters are rigorously commissioned to withstand dozens of different failure scenarios. VMware VMotion automatically enables the live migration of running virtual machines from one physical server to another with zero downtime, continuous service availability, and complete transaction integrity.

Disaster Recovery

Disaster Recovery comes with Every Subscription!

FTP Today performs backups from our production facility in Louisville, Kentucky to a highly secure system at AWS Govcloud (US-West) every four hours. This continuous backup includes critical system files, software applications, all your site configuration databases and your data files. All backups are encrypted both in transit and at rest using AES-256 encryption.

Automated Intruder Protection

FTP Today uses proprietary Intrusion Detection and Prevention heuristics to monitor, detect and instantly blacklist any offending IP address. The blacklist is then updated on our entire network of servers within a couple of minutes. For added security, FTP Today also blocks shell access to protect against hackers attempting to compromise the root operating system. Port 22 is reserved for SFTP only. Secure Shell (SSH, port 22 command line access) is not available to anyone -- not even FTP Today technical staff.

Support for Multiple Protocols

Unlike file sharing services that make you use their own software and barely (if at all) support FTP or any other automation-ready protocols, we fully support all of the following standard protocols for every authenticated user:

• HTTPS - an Explorer-like interface for file transfer, including drag-and-drop support and the ability to create file sharing links.
• FTP - standard, unencrypted FTP, which can be disabled for security reasons.
• FTPeS (Explicit FTPS) - the current standard for FTP with TLS/SSL encryption.
• FTPS (Implicit FTPS) - the former standard for FTP with SSL.
• SFTP - standard secure file transfer over an SSH-encrypted connection.

Each protocol can be individually controlled by the site administrator. With these protocol controls, you can force end users to conform to your compliance requirements, rather than letting them police themselves (e.g. by written policy).

Why not idiot-proof your FTP site with FTP Today?

File Sharing

Since 2001, FTP Today has led the industry in user-authenticated file sharing via FTP, FTPS and SFTP, as well as in providing secure browser-based access for ad-hoc file transfers.

Now, users can also share files with expiring links!

(assuming you want them to, that is*)

Turn on InfiniShare™ and any user with download permissions in a workspace will be able to create a link to certain files, then email the link to the recipient of their choice. The recipient of the link does not even need a login account on the FTP Today site.

*InfiniShare can be completely disabled system wide if you have concerns over compliance.

Country Access Restrictions

You pick which countries are allowed and the rest are simply blocked.

Using a professional Geo-IP database that tracks 99.9999% of all IP addresses in use world wide, this industry-exclusive feature gives you control over front line access by country. This feature, along with our managed Proactive Hacker Protection, will keep unwanted visitors away and prevent brute force attacks by stopping them dead in their tracks before they even receive a login prompt.

Dedicated IP & Custom SSL Cert

One FTP site, one IP address... for each customer.

Each FTP Today customer receives a dedicated, static IP address for the life of their account. No IP's are ever shared. This allows you to point your own DNS host name (e.g. sftp.yourcompany.com) to your FTP Today IP address and maintain your own site identity. We'll also purchase and install a custom SSL certificate to match your own DNS name, in most cases at no extra charge.

A dedictated IP address also means that, at most, you will require only one firewall rule to make on your end, for example an SFTP rule like "Allow port 22 outbound to <your FTP Today IP>".

Branded Web UI

Add Your Logo

Represent your own company, not ours, on all Web browser login and file transfer screens.

Custom Colors

Pick up to three specific colors for the Web UI to match your logo and company branding.

White Label Option

Eliminate the "Powered by FTP Today" from the Web UI and any support links back to us. Available on Enterprise plans.

In-transit Encryption

FTP Today follows expert guidelines in deploying SSL/TLS encryption security, resulting in an A+ grade from an independent lab. This highest independent grading is achieved in part because:

• Each SSL certificate uses an RSA 2048-bit key.
• TLS protocols are required (SSLv3 disabled).
• Elliptic Curve Cipher Suites are given top priority in preferred cipher order for browser handshake. Optional custom settings are available for things such as FIPS 140-2 enforcement.
• HTTP Strict Transport Security (HSTS) with long duration is deployed on all servers.

At-Rest Encryption

Enterprise customers have the option of adding AES 128-bit encryption* to their FTP storage. Our at-rest encryption-decryption process is completely transparent to all end users of your secure FTP site, so you may prefer this option to training users on the use of PGP file encryption.

*Even with a supercomputer, it would take one billion-billion (1.02 x 10¹⁸) years to crack a 128-bit AES key using a brute force attack. AES 256-bit encryption is also available on a dedicated server.

Unlimited Bandwidth

When we say unlimited bandwidth, we mean it. You get an unthrottled connection and unlimited monthly transfer. Upload and download as much as you want without fear of any overage charges.

Unlimited Connections

Multiple users or multiple threads per user. Our system can handle as many sumultaneous connections as you can throw at it, without a hiccup.

Unlimited File Size

Many file sharing services limit your file size to 1 GB, 2 GB or maybe 5 GB, depending on what you are paying. Not FTP Today. As long as you are under your overall storage limit, you can upload any size file you want (actually, we even let you exceed your storage limit by one file of any size).

Multiple User Interfaces

Browsers for Dummies

A user-friendly Web browser interface has been part of the FTP Today experience since our launch in 2001. Being browser-compatible back then required each user to have a Java plugin. Recent Java security issues have led us to develop our own Web App. It is designed to work within all modern browsers -– without the need for any plugins.

The FTP Today Web App is developed in-house by FTP Today programmers, so none of our competitors have anything quite like it. Our Web App is under continual development and improvement. We strive to make it as powerful as any third party FTP client software in the marketplace and we release new or improved functionality regularly, usually as a result of suggestions made by our customers.

Automation Tools for Techies

Experienced users may already have file transfer software they know well. Called "FTP clients" in general, these software typically offer the person a choice of file transfer protocols such as SFTP, FTPS, SCP or FTP. Filezilla, WS_FTP Pro, CuteFTP Pro, Fetch, SecureFX, WinSCP -– you name it (mobile tools, too) -- they are all compatible with FTP Today! Most of these software tools also support automation or scripting.

Multiple User Roles

Site Administrator Role

Create multiple Site Administrators with full reign over the entire site, both from an administration standpoint and from a file and folder permissions standpoint.

Team Manager Role

Create Team Managers who can create and manage users and folders, but only within their own team.

Standard Users

Non-administrators can only access their assigned folders and files, or perhaps reset a forgotten password.

InfiniShare Role

You will be able to control which users, if any, are allowed to create file sharing links and which users are not.

Multiple Authentication Methods

The following authentication methods are supported:

1. Password - Generally, all users will have a password, though it can be disabled once they have an SSH key in place.
2. SSH-key - More secure than password authentication, this also facilitates secure, password-less authentication, typically used for scripted (automated) SFTP connections. Public keys are easily managed on a per-user basis and one user can have more than one key if necessary.

Administrators can limit a user to only password authentication, only SSH-key authentication, or both. Allowing both might be useful if some of the user's activity is automated SFTP, but there are also occasions when the same user just wants to use their web browser.

User IP & Protocol Restrictions

A powerful security layer that allows site administrators to create user-level access rules that restrict individual user connections by remote IP address and/or by protocol. So, even if a user's password is compromised it cannot be used from another location. Some example restrictions:

• "john.smith" can connect from "66.122.1.0 - 66.122.1.256", but only on "SFTP"
• "bob" can only connect from "74.252.45.12" on "Any protocol"
• "Any User" can connect from "Any IP Address" on "HTTPS"

This feature meets requirements for two-factor authentication (username + IP address), yet it works across all protocols. 

Password Enforcement

When you have a large user base you need to control their password management behavior. We give you total control of the following:

• Password Edits & Resets - Whether users can edit their own passwords at all (manually or via reset). And, if so, can they change their own password from a Forgotten Password link.

• Password Strength - You decide what constitutes the length and strength of each chosen password.

• Password Expiration - You decide how often passwords must be changed.

• New User Invites - If enabled, new user(s) are emailed a temporary link to follow and choose their initial password. Until they do so, login access is disabled.

Of course, administrators can always edit anyone's password or send them an email to reset it themselves.

Multi-Factor Authentication

Our Web App can require authenticated users to require Two Factor Authentication (2FA). This is configurable on a per user basis to require certain users to enter a One-time Password (OTP) before being granted access. OTP can be configured per user with one of the following OTP or TOTP delivery methods:

• Email
• SMS (text message)
• TOTP Apps such as Google Authenticator, Microsoft Authenticator, Duo Mobile, Authy, etc.

Flexible Directory Structure

FTP Today provides the most flexible folder permission system in the industry. This allows you to organize your folder structure any way that suits your needs. Some options are:

1. Give every user a private folder and create shared folders as well.
2. Nest one user's home directory inside of another's.
3. Jail all users to their home directory.
4. Set up department folders as main directory branches and build customers, vendors, etc. within those.
5. Assign a user access to two or more folders off multiple branches of the site root.
6. Any or all of the above!

Limited Folder Views

You never want anyone to see any files or folders they are not supposed to. With FTP Today you'll have total control of folder visibility and access, from the top of your directory structure to the bottom. Every user will only have visibility to those folders to which they have been assigned.

• Home Directory - each user's default directory upon login -- with optional jailing (chroot).
• Private Folder(s) - a workspace only they can see and access (along with administrators).
• Shared Folder(s) - a workspace with more than one user assigned. Users can have different permissions within the same folder.

Distinct User Permissions

Some FTP hosts only give you two user permissions settings (based on the Linux operating system):

1. Read - includes Download and List.
2. Write - includes Upload, Delete and List.

Note that with the above system there is no way to allow Upload without Delete. Also, you can't prevent someone from seeing a directory listing.

FTP Today gives you more granular control over your users. Per-user permissions (per folder) are:

1. Upload - the ability to PUT files (upload them to the folder on the server).
2. Download - the ability to GET files (download them from the folder on the server).
3. Delete - the ability to delete files.
4. List - the ability to see the directory listing.

Email Notifications

Configure as many email notifications as you want, to as many people or email addresses as you want.

Send emails to:

• An email address assigned to a User or
• Any Ad-hoc email address.

Trigger emails by the activity of:

• Any user site wide (i.e. all users),
• A specific user site wide or
• Any user in a specific folder.

Activity types are:

• an Upload,
• a Download,
• a Delete or
• a Usage amount (storage threshold).

Consolidate your triggered messages:

• instantly (within one minute of the activity)
• every 15 minutes,
• hourly or
• daily.

Brand your email headers with:

• FROM/REPLY Address,
• SUBJECT and
• a BODY intro clause

As you can see, the above gives you the ultimate in flexibility in how you create outgoing email notifications based on activity within your FTP site.

File Retention Controls

Set up auto-delete rules to purge files from your FTP site based on age since upload. Choose a site-wide default of "Never Purge" or a default number of days to purge files site wide. Then override the default setting on each individual folder.