SFTPPlus MFT vs Diplomat MFT

This comparison covers the combined SFTPPlus MFT server and client licences and the Professional and Enterprise editions of Diplomat MFT.

SFTPPlus MFT server and client

First year
$4,750
Following years
$950

Licensing

Perpetual licenceContinue using the purchased production licence without renewing the optional support contract. Details
Yes
Included non-production instancesIncludes development, pre-production, and cold disaster recovery use with a production licence. Details
Yes
Unlimited automated workflowsThe selected licence does not limit the number of configured transfer workflows. Details
Yes
Unlimited file transfer usersThe selected licence does not limit the number of file transfer accounts. Details
Yes
Unlimited admin usersThe selected licence does not limit the number of administrator accounts. Details
Yes
Unlimited keys per typeThe selected licence does not limit the number of PGP, SSH, or SSL keys. Details
Yes
Cloud storage connectorsShows the number of included connections to Azure Files, SharePoint, and Exchange Online.
Unlimited

Runtime and deployment

Windows ServerRun as a background service on supported Windows Server versions. Details
Yes
LinuxRun as a background service on supported Linux distributions. Details
Yes
MacOSRun the production service on supported macOS versions. Details
Yes
Docker and Kubernetes images availableRun in standard containers or on Kubernetes and OpenShift using pre-built images. Details
Yes
Self-hosted cloud deploymentDeploy the application on your own virtual machines in a public or private cloud. Details
Yes

File transfer protocols

SFTP client and serverInitiate SFTP transfers and accept incoming SFTP connections. Details
Yes
FTP and FTPS client and serverInitiate transfers to FTP and FTPS servers and accept incoming FTP and FTPS connections from users and partner systems. Details
Yes
HTTPS web clientLet users upload, download, and manage files from a browser. Details
Yes
AS2 sendSend files and EDI documents to a partner's AS2 server. Details
Yes
AS2 receiveOperate an AS2 server that receives messages and returns signed receipts. Details
Yes
AS2 Drummond certificationDrummond certification verifies AS2 interoperability with other certified products. Details
Yes
WebDAVProvide and consume standards-based file access over HTTP or HTTPS. Details
Yes
Azure Storage and SharePointTransfer directly to and from Azure Blob, Azure Files, and SharePoint Online. Details
Yes
AWS S3, Google Cloud, Oracle Cloud Storage, Citrix ShareFile, Box, and DropboxTransfer directly to and from these cloud storage services.
No
Exchange Online mailboxMonitor an Exchange Online mailbox and process its attachments through Microsoft Graph. Details
Yes
Oracle DatabaseUse Oracle Database rows directly as transfer sources and destinations. Details
Yes
IBM MQUse IBM MQ queues directly as transfer sources and destinations. Details
Yes

Administration

Web administrationConfigure and monitor the product from a web browser. Details
Yes
Command-line administrationInspect and change product configuration from local or remote command-line tools. Details
Yes
Plain-text configurationStore the complete product configuration in a readable text file. Details
Yes
Configuration as codeReview and deploy configuration through source control and existing CI/CD or GitOps tooling. Details
Yes
Job Monitor DashboardView in-flight, queued, and recently completed jobs in a live dashboard.
No
Promote and merge transactionsPromote or merge configurations between staging and production environments.
No

Automation and integration

Scheduled transfersRun unattended transfers using recurring schedules. Details
Yes
Calendar schedulingSchedule transactions using calendar-based rules for business days, holidays, and exclusion windows. Details
Time, day of week, and day of month only
File monitoringStart processing when matching files appear in a monitored location. Details
Yes
Multiple source file definitionsDefine multiple source patterns for a single transaction. Details
Yes
Multiple destinations per jobSend the same payload to several destinations in one transaction for distribution, replication, and broadcast workflows. Details
No
Automatic retriesRetry failed transfers without operator intervention. Details
Yes
Event-driven actionsRun notifications, webhooks, file operations, or external programs in response to transfer events. Details
Yes
Inbound webhookTrigger transactions through an HTTP webhook to integrate with any system that can send a POST request.
No
Outbound webhooksTrigger requests to external webhook endpoints on file transfer activity. Details
Yes
Two-way synchronizationKeep two endpoint directory structures synchronized with a dedicated transaction type.
No
Remote-site agentsCentrally manage lightweight agents installed at branch offices or partner sites.
No
PGP file processingEncrypt, decrypt, sign, and verify files using OpenPGP. Details
Yes
External job invocationStart configured transfers from an API, command-line tool, or external scheduler. Details
Yes
Pre-job and post-job processesRun scripts or commands before and after a transaction for data preparation, notification, and integration with downstream systems.
Yes
High-priority job queueUse a dedicated queue for time-critical transactions that must run ahead of routine work.
No
Item suspensionSuspend a specific transaction or partner without disabling related items.
Yes
High-watermark file detectionReliably detect newly arrived files on a remote server when the source files cannot be deleted or modified.
Yes

Security and identity

LDAP and Active DirectoryAuthenticate users through an LDAP directory or Microsoft Active Directory. Details
Yes
OpenID Connect SSOAuthenticate file transfer users and administrators through providers such as Entra ID, Okta, and Google Identity. Details
Yes
SAML administrator SSOAuthenticate administrators through a SAML identity provider.
No
RADIUS authenticationIntegrate with RADIUS-based authentication and multi-factor systems. Details
Yes
TOTP multi-factor authenticationProtect interactive access with one-time codes from an authenticator app. Details
Yes
Role-based administrationGive administrators only the permissions required for their responsibilities. Details
Yes
IP allow and deny lists with automatic blockingAllow or deny access to the server based on source IP addresses and automatically block repeated failures. Details
Yes

Other features

Virtual directoriesUse a virtual directory system to attach any directory or drive to a user account's root folder. Details
Yes
File retention policiesUse a folder monitor to schedule automatic age-based file deletion. Details
Yes
Dedicated DMZ gatewayUse a separate component at the network edge that stores no transfer files, user credentials, or server keys.
No
Browser-side PGP encryptionEncrypt an upload in the user's browser before the file leaves the device.
No
Automatically rotating PGP subkeysUse pre-created PGP subkeys that rotate automatically.
No

High availability and audit

Centralized cluster configurationManage multiple transfer nodes from one interface and automatically distribute configuration changes. Details
Yes
Inbound connection distributionSpread incoming connections across multiple transfer servers. Details
External load balancer
Central audit trailRecord file transfers and administrative activity for operational review and compliance. Details
Yes
SQL database captureCapture all log activity in an SQL database of your choice.
SQLite
Connection map reportView the topology of every connection, including sources, destinations, and partners, for HIPAA and SOC reporting.
No
Supply chain audit reportView an end-to-end transaction audit trail covering every hop, partner, and transformation.
No
Administrator activity reportsView a per-administrator activity log showing who performed each action, when it occurred, and where it originated.
Yes

Support

Phone and emailReceive technical support by phone and email. Details
UK and EU team
Remote troubleshootingWork with support through online meetings and screen sharing. Details
Yes
24/7 critical outage responseObtain critical incident assistance outside standard business hours through an additional service. Details
Add-on

Diplomat MFT Professional

First year
$8,499
Following years
$8,499

Licensing

Perpetual licenceContinue using the purchased production licence without renewing the optional support contract. Details
No
Included non-production instancesIncludes development, pre-production, and cold disaster recovery use with a production licence. Details
Discounted
Unlimited automated workflowsThe selected licence does not limit the number of configured transfer workflows. Details
Limited to 100
Unlimited file transfer usersThe selected licence does not limit the number of file transfer accounts. Details
Limited to 25
Unlimited admin usersThe selected licence does not limit the number of administrator accounts. Details
Limited to 3
Unlimited keys per typeThe selected licence does not limit the number of PGP, SSH, or SSL keys. Details
Limited to 25
Cloud storage connectorsShows the number of included connections to Azure Files, SharePoint, and Exchange Online.
1

Runtime and deployment

Windows ServerRun as a background service on supported Windows Server versions. Details
Yes
LinuxRun as a background service on supported Linux distributions. Details
Yes
MacOSRun the production service on supported macOS versions. Details
No
Docker and Kubernetes images availableRun in standard containers or on Kubernetes and OpenShift using pre-built images. Details
No
Self-hosted cloud deploymentDeploy the application on your own virtual machines in a public or private cloud. Details
Yes

File transfer protocols

SFTP client and serverInitiate SFTP transfers and accept incoming SFTP connections. Details
Client only
FTP and FTPS client and serverInitiate transfers to FTP and FTPS servers and accept incoming FTP and FTPS connections from users and partner systems. Details
Yes
HTTPS web clientLet users upload, download, and manage files from a browser. Details
Yes
AS2 sendSend files and EDI documents to a partner's AS2 server. Details
Yes
AS2 receiveOperate an AS2 server that receives messages and returns signed receipts. Details
No
AS2 Drummond certificationDrummond certification verifies AS2 interoperability with other certified products. Details
No
WebDAVProvide and consume standards-based file access over HTTP or HTTPS. Details
No
Azure Storage and SharePointTransfer directly to and from Azure Blob, Azure Files, and SharePoint Online. Details
Yes
AWS S3, Google Cloud, Oracle Cloud Storage, Citrix ShareFile, Box, and DropboxTransfer directly to and from these cloud storage services.
Yes
Exchange Online mailboxMonitor an Exchange Online mailbox and process its attachments through Microsoft Graph. Details
No
Oracle DatabaseUse Oracle Database rows directly as transfer sources and destinations. Details
No
IBM MQUse IBM MQ queues directly as transfer sources and destinations. Details
No

Administration

Web administrationConfigure and monitor the product from a web browser. Details
Yes
Command-line administrationInspect and change product configuration from local or remote command-line tools. Details
No
Plain-text configurationStore the complete product configuration in a readable text file. Details
No
Configuration as codeReview and deploy configuration through source control and existing CI/CD or GitOps tooling. Details
No
Job Monitor DashboardView in-flight, queued, and recently completed jobs in a live dashboard.
Yes
Promote and merge transactionsPromote or merge configurations between staging and production environments.
No

Automation and integration

Scheduled transfersRun unattended transfers using recurring schedules. Details
Yes
Calendar schedulingSchedule transactions using calendar-based rules for business days, holidays, and exclusion windows. Details
Yes
File monitoringStart processing when matching files appear in a monitored location. Details
Yes
Multiple source file definitionsDefine multiple source patterns for a single transaction. Details
Yes
Multiple destinations per jobSend the same payload to several destinations in one transaction for distribution, replication, and broadcast workflows. Details
No
Automatic retriesRetry failed transfers without operator intervention. Details
Yes
Event-driven actionsRun notifications, webhooks, file operations, or external programs in response to transfer events. Details
Yes
Inbound webhookTrigger transactions through an HTTP webhook to integrate with any system that can send a POST request.
No
Outbound webhooksTrigger requests to external webhook endpoints on file transfer activity. Details
Yes
Two-way synchronizationKeep two endpoint directory structures synchronized with a dedicated transaction type.
Yes
Remote-site agentsCentrally manage lightweight agents installed at branch offices or partner sites.
Yes
PGP file processingEncrypt, decrypt, sign, and verify files using OpenPGP. Details
Yes
External job invocationStart configured transfers from an API, command-line tool, or external scheduler. Details
Yes
Pre-job and post-job processesRun scripts or commands before and after a transaction for data preparation, notification, and integration with downstream systems.
No
High-priority job queueUse a dedicated queue for time-critical transactions that must run ahead of routine work.
Yes
Item suspensionSuspend a specific transaction or partner without disabling related items.
Yes
High-watermark file detectionReliably detect newly arrived files on a remote server when the source files cannot be deleted or modified.
Yes

Security and identity

LDAP and Active DirectoryAuthenticate users through an LDAP directory or Microsoft Active Directory. Details
Add-on
OpenID Connect SSOAuthenticate file transfer users and administrators through providers such as Entra ID, Okta, and Google Identity. Details
No
SAML administrator SSOAuthenticate administrators through a SAML identity provider.
Add-on
RADIUS authenticationIntegrate with RADIUS-based authentication and multi-factor systems. Details
No
TOTP multi-factor authenticationProtect interactive access with one-time codes from an authenticator app. Details
Add-on
Role-based administrationGive administrators only the permissions required for their responsibilities. Details
No
IP allow and deny lists with automatic blockingAllow or deny access to the server based on source IP addresses and automatically block repeated failures. Details
Yes

Other features

Virtual directoriesUse a virtual directory system to attach any directory or drive to a user account's root folder. Details
Yes
File retention policiesUse a folder monitor to schedule automatic age-based file deletion. Details
No
Dedicated DMZ gatewayUse a separate component at the network edge that stores no transfer files, user credentials, or server keys.
Yes
Browser-side PGP encryptionEncrypt an upload in the user's browser before the file leaves the device.
Add-on
Automatically rotating PGP subkeysUse pre-created PGP subkeys that rotate automatically.
Yes, pre-created

High availability and audit

Centralized cluster configurationManage multiple transfer nodes from one interface and automatically distribute configuration changes. Details
Yes
Inbound connection distributionSpread incoming connections across multiple transfer servers. Details
Edge Gateway
Central audit trailRecord file transfers and administrative activity for operational review and compliance. Details
Yes
SQL database captureCapture all log activity in an SQL database of your choice.
Yes
Connection map reportView the topology of every connection, including sources, destinations, and partners, for HIPAA and SOC reporting.
Yes
Supply chain audit reportView an end-to-end transaction audit trail covering every hop, partner, and transformation.
Yes
Administrator activity reportsView a per-administrator activity log showing who performed each action, when it occurred, and where it originated.
Yes

Support

Phone and emailReceive technical support by phone and email. Details
US team
Remote troubleshootingWork with support through online meetings and screen sharing. Details
Yes
24/7 critical outage responseObtain critical incident assistance outside standard business hours through an additional service. Details
No

Diplomat MFT Enterprise

First year
$12,999
Following years
$12,999

Licensing

Perpetual licenceContinue using the purchased production licence without renewing the optional support contract. Details
No
Included non-production instancesIncludes development, pre-production, and cold disaster recovery use with a production licence. Details
Discounted
Unlimited automated workflowsThe selected licence does not limit the number of configured transfer workflows. Details
Yes
Unlimited file transfer usersThe selected licence does not limit the number of file transfer accounts. Details
Yes
Unlimited admin usersThe selected licence does not limit the number of administrator accounts. Details
Yes
Unlimited keys per typeThe selected licence does not limit the number of PGP, SSH, or SSL keys. Details
Yes
Cloud storage connectorsShows the number of included connections to Azure Files, SharePoint, and Exchange Online.
5

Runtime and deployment

Windows ServerRun as a background service on supported Windows Server versions. Details
Yes
LinuxRun as a background service on supported Linux distributions. Details
Yes
MacOSRun the production service on supported macOS versions. Details
No
Docker and Kubernetes images availableRun in standard containers or on Kubernetes and OpenShift using pre-built images. Details
No
Self-hosted cloud deploymentDeploy the application on your own virtual machines in a public or private cloud. Details
Yes

File transfer protocols

SFTP client and serverInitiate SFTP transfers and accept incoming SFTP connections. Details
Yes
FTP and FTPS client and serverInitiate transfers to FTP and FTPS servers and accept incoming FTP and FTPS connections from users and partner systems. Details
Yes
HTTPS web clientLet users upload, download, and manage files from a browser. Details
Yes
AS2 sendSend files and EDI documents to a partner's AS2 server. Details
Yes
AS2 receiveOperate an AS2 server that receives messages and returns signed receipts. Details
No
AS2 Drummond certificationDrummond certification verifies AS2 interoperability with other certified products. Details
No
WebDAVProvide and consume standards-based file access over HTTP or HTTPS. Details
No
Azure Storage and SharePointTransfer directly to and from Azure Blob, Azure Files, and SharePoint Online. Details
Yes
AWS S3, Google Cloud, Oracle Cloud Storage, Citrix ShareFile, Box, and DropboxTransfer directly to and from these cloud storage services.
Yes
Exchange Online mailboxMonitor an Exchange Online mailbox and process its attachments through Microsoft Graph. Details
No
Oracle DatabaseUse Oracle Database rows directly as transfer sources and destinations. Details
No
IBM MQUse IBM MQ queues directly as transfer sources and destinations. Details
No

Administration

Web administrationConfigure and monitor the product from a web browser. Details
Yes
Command-line administrationInspect and change product configuration from local or remote command-line tools. Details
No
Plain-text configurationStore the complete product configuration in a readable text file. Details
No
Configuration as codeReview and deploy configuration through source control and existing CI/CD or GitOps tooling. Details
No
Job Monitor DashboardView in-flight, queued, and recently completed jobs in a live dashboard.
Yes
Promote and merge transactionsPromote or merge configurations between staging and production environments.
Yes

Automation and integration

Scheduled transfersRun unattended transfers using recurring schedules. Details
Yes
Calendar schedulingSchedule transactions using calendar-based rules for business days, holidays, and exclusion windows. Details
Yes
File monitoringStart processing when matching files appear in a monitored location. Details
Yes
Multiple source file definitionsDefine multiple source patterns for a single transaction. Details
Yes
Multiple destinations per jobSend the same payload to several destinations in one transaction for distribution, replication, and broadcast workflows. Details
Yes
Automatic retriesRetry failed transfers without operator intervention. Details
Yes
Event-driven actionsRun notifications, webhooks, file operations, or external programs in response to transfer events. Details
Yes
Inbound webhookTrigger transactions through an HTTP webhook to integrate with any system that can send a POST request.
Yes
Outbound webhooksTrigger requests to external webhook endpoints on file transfer activity. Details
Yes
Two-way synchronizationKeep two endpoint directory structures synchronized with a dedicated transaction type.
Yes
Remote-site agentsCentrally manage lightweight agents installed at branch offices or partner sites.
Yes
PGP file processingEncrypt, decrypt, sign, and verify files using OpenPGP. Details
Yes
External job invocationStart configured transfers from an API, command-line tool, or external scheduler. Details
Yes
Pre-job and post-job processesRun scripts or commands before and after a transaction for data preparation, notification, and integration with downstream systems.
Yes
High-priority job queueUse a dedicated queue for time-critical transactions that must run ahead of routine work.
Yes
Item suspensionSuspend a specific transaction or partner without disabling related items.
Yes
High-watermark file detectionReliably detect newly arrived files on a remote server when the source files cannot be deleted or modified.
Yes

Security and identity

LDAP and Active DirectoryAuthenticate users through an LDAP directory or Microsoft Active Directory. Details
Yes
OpenID Connect SSOAuthenticate file transfer users and administrators through providers such as Entra ID, Okta, and Google Identity. Details
No
SAML administrator SSOAuthenticate administrators through a SAML identity provider.
Yes
RADIUS authenticationIntegrate with RADIUS-based authentication and multi-factor systems. Details
No
TOTP multi-factor authenticationProtect interactive access with one-time codes from an authenticator app. Details
Yes
Role-based administrationGive administrators only the permissions required for their responsibilities. Details
Yes
IP allow and deny lists with automatic blockingAllow or deny access to the server based on source IP addresses and automatically block repeated failures. Details
Yes

Other features

Virtual directoriesUse a virtual directory system to attach any directory or drive to a user account's root folder. Details
Yes
File retention policiesUse a folder monitor to schedule automatic age-based file deletion. Details
Yes
Dedicated DMZ gatewayUse a separate component at the network edge that stores no transfer files, user credentials, or server keys.
Yes
Browser-side PGP encryptionEncrypt an upload in the user's browser before the file leaves the device.
Yes
Automatically rotating PGP subkeysUse pre-created PGP subkeys that rotate automatically.
Yes, pre-created

High availability and audit

Centralized cluster configurationManage multiple transfer nodes from one interface and automatically distribute configuration changes. Details
Yes
Inbound connection distributionSpread incoming connections across multiple transfer servers. Details
Edge Gateway
Central audit trailRecord file transfers and administrative activity for operational review and compliance. Details
Yes
SQL database captureCapture all log activity in an SQL database of your choice.
Yes
Connection map reportView the topology of every connection, including sources, destinations, and partners, for HIPAA and SOC reporting.
Yes
Supply chain audit reportView an end-to-end transaction audit trail covering every hop, partner, and transformation.
Yes
Administrator activity reportsView a per-administrator activity log showing who performed each action, when it occurred, and where it originated.
Yes

Support

Phone and emailReceive technical support by phone and email. Details
US team
Remote troubleshootingWork with support through online meetings and screen sharing. Details
Yes
24/7 critical outage responseObtain critical incident assistance outside standard business hours through an additional service. Details
Add-on

Pricing and features as published on 5 September 2026. Contact us and we will update the page.

When SFTPPlus MFT is a better fit ​

SFTPPlus MFT suits teams that want a perpetual licence with no licence limits on workflows, users, or administrator accounts. Support is optional, and the production licence remains valid without renewal. It combines server and client functionality on Windows, Linux, macOS, and Kubernetes, and supports both sending and receiving AS2 messages.

Its centralized approach works best when applications can already exchange files over supported protocols. It does not provide lightweight remote agents or a dedicated two-way synchronization feature, which can make it less suitable for some distributed environments.

When Diplomat MFT is a better fit ​

Diplomat MFT suits distributed environments where remote agents can connect applications that lack file transfer capabilities. Both editions include two-way synchronization, calendar scheduling, and visual job monitoring. Enterprise adds capabilities such as multiple destinations per job and role-based administration.

The tradeoffs are recurring subscription costs and edition limits. Professional is limited to 100 workflows and 25 file transfer users, with some authentication features sold as add-ons. Enterprise removes those workflow and user limits and includes LDAP, SAML, and TOTP authentication, but has a higher annual price.

The Diplomat information on this page is based on Coviant Software's pricing and edition comparison.