Files.comExaVault
ExaVaultON-PREMISE

Free FTP, SFTP, and Web File Transfer
for Your Own Datacenter

Download the free ExaVault appliance and run a full FTP, SFTP, FTPS, and WebDAV server inside your VPC. Web File Manager, AD/LDAP, audit log, share links. Free for deployments up to 50 users; a Paid license is required above that ($99/month per 50-user pack) — and also adds production support and operational features.

✓ Free, up to 50 users✓ Self-hosted✓ No data leaves your VPC
Ships for
VMware
VMware vSphere
OVA · ESXi 7+
Amazon Web Services
AWS Marketplace
AMI · all regions
Google Cloud
Google Cloud
Marketplace image
Microsoft Azure
Microsoft Azure
Marketplace VM

Hyper-V supported via image conversion from the VMware OVA.

Every Transfer Standard Your Partners Use

SFTP
SSH-based; modern default
FTPS
FTP over TLS; legacy partners
FTP
Plain FTP for the truly stuck
WebDAV
HTTP-native filesystem mount

A Self-Hosted FTP / SFTP Server, Free Up to 50 Users

ExaVault is a focused, self-hosted file-transfer appliance for teams that need protocol-level access to their own datacenter. The features below are the full picture — if your workflow needs automation, an API, or partner integrations, you want Files.com instead.

Web File Manager

Browser-native UI for end users. Drag-drop uploads, folder permissions, shareable links.

Every Standard Protocol

FTP, SFTP, FTPS, and WebDAV on a hostname you control. Any client your partners use, your hardware.

AD / LDAP & SSO

Bind to your directory. Group-based permissions. SAML / SSO add-on for centralized identity.

Share Links

Send a partner a single URL to upload or download a folder. Optional password and expiry.

Audit Log

Every login, transfer, and permission change recorded. Local viewing; export to your SIEM.

Self-Hosted Control

Files never leave your VPC. You patch, you back up, you own the encryption keys. Free for deployments up to 50 users; paid license required above that.

Notifications

Email alerts when files are uploaded to a folder, when a share link is used, or when an admin action occurs. Configurable per-folder and per-user.

White-Label Branding

Your logo, your color scheme, your custom login page, your own Terms of Use that users accept on first login. Override anything site-wide with custom CSS.

Cipher Control

Choose which TLS and SSH ciphers the appliance will accept. Lock down to FIPS-approved ciphers, disable legacy algorithms, meet your compliance bar.

Download the Appliance

Free for deployments up to 50 users. Provision in the cloud or your datacenter in under an hour. Above 50 users a Paid license is required ($99/month per 50-user pack); Paid also adds production support and operational features.

Or jump straight to your platform:
VMwareAWSGoogle CloudMicrosoft Azure

Common Questions About the On-Premise Appliance

What the appliance actually does, how users access files, how it integrates with your identity stack, and what it doesn't include.

The appliance is free for deployments up to 50 users — the full feature set, every protocol, the web manager, share links, the audit log. No expiring trial, no time limit.

Above 50 users a Paid license is required: $99/month per 50-user pack. The Paid license also unlocks production features at any user count — email and phone support, automatic updates, SSO, 2FA, automatic SSL, and SIEM export. Enterprise tier adds 24/7 support and managed assistance.

File content stays in your environment. The appliance runs as a VM image inside your own infrastructure (VMware vSphere, AWS, GCP, or Azure); file payloads, user credentials, and audit logs all stay on disk inside that environment. The appliance does not transmit file contents anywhere.

What the appliance does check in for: a periodic ping to our license server so we know who’s running the product, plus aggregate usage statistics — total number of users, total file volume, and similar deployment-shape numbers. We use that data to understand our free-user community and size our investment in the product. We do not collect filenames, file contents, user identities, or anything else that would identify what your team is moving.

Optional outbound traffic on the Paid tier: automatic SSL certificate renewal via Let’s Encrypt, and automatic software updates from the ExaVault release server.

FTP (port 21), FTPS (explicit on 21 or implicit on 990), SFTP over SSH (port 22), and WebDAV. Any client your trading partners already use will connect — FileZilla, WinSCP, Cyberduck, command-line ftp/sftp, automated scripts, EDI systems, all of them. Cipher Control is configurable: administrators can restrict the appliance to specific TLS or SSH ciphers to meet compliance requirements.

Three ways, all from a single user account:

Browser: the web file manager — drag-and-drop uploads, folder navigation, share link creation, all in any modern browser.

FTP / SFTP / FTPS / WebDAV client: the same credentials that work in the web UI work in every client.

Share Links: send an external partner a single URL to upload to or download from a specific folder, no account required on their side. Share Links can be password-protected and time-limited.

Active Directory and LDAP for directory-bound user accounts and group permissions. SAML SSO (Paid tier) for single sign-on through Okta, Auth0, JumpCloud, Google Workspace, or any SAML 2.0 identity provider. SCIM provisioning (Paid tier) for automatic user lifecycle. Two-factor authentication is built in — TOTP apps, hardware keys, and SMS (the latter requires a Twilio account configured in the Appliance Manager).

Yes — every login attempt, file transfer, permission change, and administrative action is recorded with a timestamp, user, source IP, and the affected resource. The log is viewable in the Appliance Manager and exportable as CSV. The Paid tier adds syslog export to a SIEM endpoint of your choice for real-time forwarding.

Yes. Administrators can replace the logo and icons, set a color scheme, customize the login page, write a custom Terms of Use Agreement that new users must accept before first use, and override styling site-wide via custom CSS. The Appliance Manager exposes these settings under Branding without requiring engineering involvement. Custom contact information shown at the bottom of administrative emails (new user, password reset, etc.) is also configurable.

The appliance is intentionally focused on protocol-level file transfer + a web UI for end users. It does not include:

Visual automation workflows, a REST API or SDKs, partner integrations (AS2, EDI orchestration), built-in PGP/GPG encryption, AS2 partner messaging, or scheduled transfers between cloud storage backends. Those live on Files.com Cloud — the modern File Orchestration Platform from the company that owns ExaVault. If your workflow needs any of those, cloud is the right answer.

On the Paid tier: automatic. The Appliance Manager checks for updates daily and applies them on a schedule you configure — both ExaVault software and Linux OS patches via unattended upgrades. On the Free tier: manual. We publish new appliance images periodically; the upgrade path is to deploy the new image and re-map your existing data disk to it. The full upgrade procedure is in the documentation.

Need Automation, an API, or Partner Integrations?

The free appliance is intentionally focused — protocol-level file transfer plus a web UI. Anything beyond that lives on Files.com's File Orchestration Platform: visual workflows, full REST API, AS2 partner integrations, PGP/GPG, SOC 2 / HIPAA-BAA out of the box.