The Research Security Company (Qualys Threat Research Unit) discovered an SSHD vulnerability (NVD &#...
Porta SFTP Server supports multiple authentication options such as username and password and public ...
By default people just only rely on the Security Socket Layer (SSL) and Transport Layer Security (TL...
Active membership means you have a subscription to any of our software products or services that we provide.
If you do not have an active subscription, please do not attempt to log in, as auto-banning and other malicious event detections are enabled on our website for security purposes.
Note. This website also uses Imunify360 with Proactive Defense Enabled.
Software and License File will be sent separately as a zip file with AES-256 Encryption via a secured URL
Please understand this process as it is for security purposes
Note: Software Delivery May Take 8-24 Hours
Temporary download link will be sent via email within 15 minutes. If you encounter a download issue, please contact us. If Windows Defender flags the zip file, this is a false positive, as long as you verify the CRC64/SHA256, you are safe.
Caveat: Disposable email MAY NOT always work. That said, if you are diligently interested in this product and have nothing to hide, please use a non-disposable one. This website also uses Imunify360 with Proactive Defense enabled to scan malicious scripts.
Note. If you’re getting invalid nonce error, please try clearing your browser cache and make sure that your firewall is NOT blocking the URL / link.
As part of our transparency, we listed the reports of individuals or groups who help us improve our security to protect our customers.
| Groups | Reports/Improv. Suggestions. |
|---|---|
Bug Bounty – PH |
|
Security is one of PORTA SFTP SERVER’s top priorities, with that said, the app itself is very easy to use but we’ve implemented rigorous protection to it as well. With the certificate authorization protection, you will have the additional security below.
Note: Do not share your private key or password of your certificate with anyone.
Although it’s not required, attributions are a way of us giving credit to the people(Companies) who maintain or create the other frameworks, libraries, and tools we used and to create a demo for the software. Special shout-out to the following developers/organizations.
 | Apache MINA is a network application framework that helps users develop high-performance and high-scalability network applications easily. It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO. |
 | OPNsense is an open-source, easy-to-use, and easy-to-build FreeBSD based firewall and routing platform. OPNsense includes most of the features available in expensive commercial firewalls, and more in many cases. It brings a rich feature set of commercial offerings with the benefits of open and verifiable sources. |
 | The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. |
 | Bouncy Castle is a collection of APIs used in cryptography. |
 | OWASP Dependency-Check is a Software Composition Analysis (SCA) tool that attempts to detect publicly disclosed vulnerabilities contained within a project’s dependencies. |
 | Eclipse Temurin is the open source Java SE build based upon OpenJDK. Temurin is available for a wide range of platforms and Java SE versions. |
 | SQLite is a free, fast, and light-embedded/standalone database. |
 | DB Browser is a high-quality, visual, open-source tool to create, design, and edit database files for the SQLite database. |
 | DuckDB is a fast in-process and portable analytical database that support SQL Syntax. |
 | WinSCP is a free and open-source SSH File Transfer Protocol such as SFTP, FTP. SCP, AS3, and WebDAV. |
 | 7-Zip is a free and open-source file archiver, a utility used to place groups of files within compressed containers known as “archives”. |