5 min read
Your bash script is probably running hundreds of transfers a month. Here's what it actually costs to keep running it, and when it's the right call to stay.
4 min read
Most MFT vendors lock cryptographic audit at Enterprise. Here's why we put the hash chain at $150/month, and what each tier actually adds.
5 min read
Merkle trees solve sparse verification. MFT audit doesn't have that problem. Here's the specific reasoning behind choosing the boring algorithm, and why simpler is more auditable.
6 min read
Most "encrypted" MFT platforms use TLS. The server still sees every file it routes. Here's the end-to-end encryption architecture that removes the vendor from your trust chain entirely.
5 min read
Most MFT audit logs are database records. Records can be altered. Here's how mftctl audit verify gives you cryptographic proof from a terminal, offline if needed.
5 min read
A free Rust CLI that scans your network for hidden file transfers. Finds crontabs, scheduled tasks, scripts, and tool configs on Linux and Windows.
6 min read
Transfer Triggers watch a directory and auto-transfer matching files. Failed one-shot jobs retry automatically. mft-discover scans your network for existing transfer activity. Four features, one release.
5 min read
v0.2.0 shipped three weeks ago. Seven UAT passes, 11 bugs fixed, a network discovery tool that finds the transfers you didn't know about, and what's coming next.
6 min read
Find shadow transfers, hardcoded credentials, and plaintext FTP in 30 minutes. Printable checklists for security, reliability, and compliance. Actual commands included.
7 min read
Most teams don't need to replace their file transfer tools. They need something to connect them. Orchestration layer for cron, SFTP, scripts, and scheduled tasks.
6 min read
SFTP is free until someone asks where their file went, why it took 14 hours, or why it's unreadable. Three scenarios that cost real money and how to prevent them.
6 min read
Most MFT deployments drag for months, not because the software is complex, but because the process around it is. Here's where the time actually goes, and how to compress it.
5 min read
What a basic audit turns up on most file transfer setups: plaintext credentials, no audit trails, FTP still on port 21. Your FTP server is failing POPIA, SOC 2, and GDPR.