Products
Both grew out of client work that had no acceptable off-the-shelf answer. Both are deployed in your own environment — on your hardware, under your keys.
A certificate authority you own end to end — offline root, delegated issuing CAs, live revocation, trusted timestamps and document signing — with every private key locked inside a hardware security module.
A proactive FTP server. Files are authenticated against your certificate authority, checked on arrival, routed into the systems that need them, and announced to the people who are waiting — without a polling script anywhere.
Better together
Run them side by side and SftpS stops managing its own credentials. Every client certificate and every host key is issued, checked and revoked by the same authority you already operate — so offboarding a partner is one revocation, not a spreadsheet.
Client certificates minted by your Identity SubCA are accepted by SftpS with no separate user store.
A revoked certificate fails the next SftpS handshake because the server checks OCSP live.
Transfer receipts are timestamped by your own TSA, so delivery disputes end with evidence.
We run a scoped pilot in your environment — your hardware, your policies, your clients — before anybody signs a licence.
