IBM Sterling Secure File Transfer

IBM Managed File Transfer (primary)Compare with others in Managed File Transfer

Product

IBM Sterling Secure File Transfer bundles five Sterling products: File Gateway, Connect:Direct, Control Center Monitor, Control Center Director and Secure Proxy. Partners and applications send files into File Gateway mailboxes or over Connect:Direct, the files are routed to internal systems or other partners, Secure Proxy handles sessions in the DMZ, and Control Center provides monitoring and configuration. It is sold in Essentials, Standard, Premium and Kubernetes-based Container editions. IBM Sterling® Secure File Transfer provides a unified file transfer platform so you can share and track mission-critical information movement within your enterprise and across your trading partner network with peace of mind. This edition offers unrestricted, enterprise grade MFT capabilities, supports all common communication protocols, and provides unlimited file transfer volumes. Gain the benefit of the most trusted managed file transfer solution. It runs on Linux and Windows Server.

Current Version: 2.3
Product Page: ibm.com/…/secure-file-transfer
Market: EnterpriseMid-MarketSMB
Licence: Paid
Price: Quote
Record Created: 2026-10-07
Last Updated: 2026-10-23

Vendor

IBM's security business is built on operations rather than on endpoint protection: its best-known product is QRadar, the security information and event management platform that many large organisations run their security operations centre on, alongside a substantial consulting and managed services arm and the X-Force research and incident response teams. IBM QRadar EDR, the product listed here, is its endpoint detection and response agent, which came from its 2021 acquisition of the Italian company ReaQta. One thing a buyer should check. In 2024 IBM agreed to sell the QRadar SaaS business to Palo Alto Networks and to migrate those customers onto Cortex XSIAM, which changes the future of the wider QRadar family; the product line listed here should be confirmed as currently sold and supported before it is evaluated. Vendor page →

Website: ibm.com
Country: United States
Headquarters: Armonk, United States
Year Established: 1911
Customers: 30K organisations
Users: 2M devices protected
Revenue: $67.5B (2025)

Platforms

Container	native
Linux	native
Windows Server	native

Target Market

Enterprise secondaryMid-Market secondarySMB primary

Capabilities

SFTPkey	native
FTPS	native
AS2 (B2B EDI)key	partial
SMB / CIFS File Shares	Not known
NFS	Not known
Browser Transfer Client	native
Ad-hoc Secure Sharingkey	Not known
Workflow Automationkey	native
Cloud Storage Connectors	native
API Integration	native
Encryption at Restkey	native
OpenPGP Encryption	native
Malware Scanning of Transferskey	third party
Multi-Engine Scanning	Not known
Content Disarm & Reconstructionkey	Not known
DLP Integrationkey	Not known
Sandbox Analysiskey	Not known
Threat Intelligence	Not known
File-Based Vulnerability Assessment	Not known
File Structure Validation	Not known
ICAP / Gateway Integration	native
Tamper-Evident Audit Trailkey	Not known
SSO / MFA	native
SIEM Integration	Not known
High Availabilitykey	native
Multi-Tenant (MSP) Management	Not known

13 of 26 not yet known — not recorded, which is not the same as not supported.

Specifications

Pricing

Plan	Licence	Priced per	Billed	Price
Summary	Price on request	not stated	no recurring charge	Quote

Versions

2.3platform not recordedreleased 2025-04-01

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Change History

This record was created 2026-10-07. Everything below is what has changed since.

2026-10-20New versionNew version: 2.3evidence
2026-10-07Capability addedHigh Availability: built inevidence
2026-10-07Capability addedSSO / MFA: built inevidence
2026-10-07Capability addedICAP / Gateway Integration: built inevidence
2026-10-07Capability addedMalware Scanning of Transfers: via a third partyevidence
2026-10-07Capability addedOpenPGP Encryption: built inevidence
2026-10-07Capability addedEncryption at Rest: built inevidence
2026-10-07Capability addedAPI Integration: built inevidence
2026-10-07Capability addedCloud Storage Connectors: built inevidence
2026-10-07Capability addedWorkflow Automation: built inevidence
2026-10-07Capability addedBrowser Transfer Client: built inevidence
2026-10-07Capability addedAS2 (B2B EDI): limitedevidence
2026-10-07Capability addedFTPS: built inevidence
2026-10-07Capability addedSFTP: built inevidence
2026-10-07Pricing plan addedPrice: price on requestevidence
2026-10-07Platform addedRuns on Linuxevidence
2026-10-07Product updatedAlso sold to: Enterpriseevidence
2026-10-07Product updatedAlso sold to: Mid-Marketevidence
2026-10-07Product updatedSold to: SMBevidence
2026-10-07Platform addedRuns on Containerevidence
2026-10-07Platform addedRuns on Windows Serverevidence
2026-10-07Product createdNew product, listed in Managed File Transferevidence

Something wrong? Suggest a correction →