CyberIndexBeta

Product

Kiteworks MFT is the managed file transfer component of the Kiteworks Private Data Network, delivered as a hardened virtual appliance on premises, in a private cloud, or hosted by Kiteworks. It moves files over SFTP, FTPS, SMB/CIFS and AS2 and to cloud stores, with workflows scheduled through a visual designer. The same platform provides browser-based secure file sharing and secure email for person-to-person exchange. For organizations that need to scale without limits, Kiteworks MFT deploys across clustered nodes for high availability — so even when individual nodes go offline, file transfers route automatically to working nodes and operations never miss a beat. That movement is called managed file transfer , or MFT, and for most organizations it is simultaneously mission-critical and deeply underprotected. Every file in motion is encrypted in transit; every file at rest is protected with AES-256 encryption inside the Kiteworks hardened virtual appliance . Recorded capabilities include ad-hoc secure sharing, api integration, as2 (b2b edi) and browser transfer client.

Current Version
9.5.1
Market
EnterpriseGovernment
Licence
Paid
Price
Quote
Record Created
2026-10-07
Last Updated
2026-10-23

Vendor

Kiteworks sells a Private Data Network platform that governs, monitors and protects sensitive data exchanged over email, file sharing and APIs, deployable on-premises, in private or hybrid cloud, or in a FedRAMP environment. Vendor page →

Country
United States
Headquarters
San Mateo, CA, United States
Year Established
1999
Customers
3,800 organisations
Users
100M users
Revenue
$100.0M (2026)

Platforms

Cloudnative

Target Market

Enterprise primaryGovernment secondary

Capabilities

SFTPkeynative
FTPSnative
AS2 (B2B EDI)keynative
SMB / CIFS File Sharesnative
NFSnative
Browser Transfer Clientnative
Ad-hoc Secure Sharingkeynative
Workflow Automationkeynative
Cloud Storage Connectorsnative
API Integrationoptional module
Encryption at Restkeynative
OpenPGP EncryptionNot known
Malware Scanning of Transferskeynative
Multi-Engine ScanningNot known
Content Disarm & Reconstructionkeyoptional module
DLP Integrationkeythird party
Sandbox Analysiskeyintegrated
Threat IntelligenceNot known
File-Based Vulnerability AssessmentNot known
File Structure ValidationNot known
ICAP / Gateway Integrationnative
Tamper-Evident Audit Trailkeynative
SSO / MFAnative
SIEM Integrationnative
High Availabilitykeynative
Multi-Tenant (MSP) ManagementNot known

6 of 26 not yet known — not recorded, which is not the same as not supported.

Specifications

Scanning Engines1 engineestimated by LLM: not disclosed by the vendor

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 9.5.1platform not recorded

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

FedRAMPModerate1 activeModerate
FIPS 140-3Level 11 activeFIPS 140-3 #4980

Change History

This record was created 2026-10-07. Everything below is what has changed since.

  • 2026-10-18Capability addedContent Disarm & Reconstruction: optional moduleevidence
  • 2026-10-14New versionNew version: 9.5.1evidence
  • 2026-10-12Certification addedCertified: FIPS 140-3evidence
  • 2026-10-10Capability addedSandbox Analysis: integratedevidence
  • 2026-10-08Capability addedNFS: built inevidence
  • 2026-10-08Capability addedSMB / CIFS File Shares: built inevidence
  • 2026-10-07Certification addedCertified: FedRAMP (Moderate)evidence
  • 2026-10-07Certification addedCertified: FIPS 140-3 (Level 1)evidence
  • 2026-10-07Capability addedHigh Availability: built inevidence
  • 2026-10-07Capability addedSIEM Integration: built inevidence
  • 2026-10-07Capability addedSSO / MFA: built inevidence
  • 2026-10-07Capability addedTamper-Evident Audit Trail: built inevidence
  • 2026-10-07Capability addedDLP Integration: via a third partyevidence
  • 2026-10-07Capability addedICAP / Gateway Integration: built inevidence
  • 2026-10-07Capability addedContent Disarm & Reconstruction: built inevidence
  • 2026-10-07Capability addedMalware Scanning of Transfers: built inevidence
  • 2026-10-07Capability addedEncryption at Rest: built inevidence
  • 2026-10-07Capability addedAPI Integration: optional moduleevidence
  • 2026-10-07Capability addedCloud Storage Connectors: built inevidence
  • 2026-10-07Capability addedWorkflow Automation: built inevidence
  • 2026-10-07Capability addedAd-hoc Secure Sharing: built inevidence
  • 2026-10-07Capability addedBrowser Transfer Client: built inevidence
  • 2026-10-07Capability addedAS2 (B2B EDI): built inevidence
  • 2026-10-07Capability addedFTPS: built inevidence
  • 2026-10-07Capability addedSFTP: built inevidence
  • 2026-10-07Pricing plan addedPrice: price on requestevidence
  • 2026-10-07Platform addedRuns on Cloudevidence
  • 2026-10-07Product updatedAlso sold to: Governmentevidence
  • 2026-10-07Product updatedSold to: Enterpriseevidence
  • 2026-10-07Product createdNew product, listed in Managed File Transferevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.