CrushFTP

CrushFTP is a file transfer server designed to establish secure connections with users. Its name originates from the built-in compression methods that allow downloading files in compressed format in-stream or automatically expanding zip files as they are received, a technology called ZipStreaming. Administration is performed entirely from a web browser, enabling management and monitoring of the server from any location or device. The system detects common hacking attempts and robots scanning for weak passwords, automatically banning those IP addresses to maintain server security. User management includes inheritance, groups, and virtual file systems, simplifying the delegation of account administration.

★★★★★

3.0(1 ratings)

• Delegated Administration. The server administrator can grant management access to end users in a limited manner. A user can be allowed to view the user manager or edit users, see server preferences or modify them, monitor jobs or edit them. It is also possible to create a limited administrator who only has access to a subset of users, remaining isolated in their own restricted administration area.
• Global Alerts. Alerts are global actions that the server monitors to notify the administrator of specific occurrences. This includes events such as a user reaching their quota, a user getting banned, or a drive running low on free space. Alerts represent a global method for discovering issues that may affect server operations.
• AS2 Support. Although CrushFTP is not a traditional AS2 server focused on B2B operations, it accepts AS2 files and sends MDN responses. CrushTask can be configured to send outgoing AS2 requests or to proxy data through CrushFTP as an outgoing AS2 send. CrushFTP treats AS2 transfers as an additional method for sending file content.
• Automated Banning. CrushFTP constantly monitors connection patterns and user actions. If it detects abusive behavior based on these parameters, it bans the user's IP permanently or temporarily. It effectively weeds out robots scanning public servers by detecting login attempts with common usernames like 'root', 'admin', or 'mysql', banning the IP even after a single attempt. Additional protection mitigates DDoS attacks.
• CrushTunnel and Acceleration. CrushTunnel allows running other connections inside a multiplexed HTTP(S) connection. For example, an insecure FTP connection can run inside an HTTPS tunnel to its destination, keeping everything secure. The tunnel gracefully recovers from lost packets and disconnections. It also provides bandwidth acceleration for Enterprise licenses, splitting a single connection into multiple connections that deliver data in parallel to be reassembled in order at the destination.
• CrushSync Synchronization. This provides real-time file synchronizations through CrushFTP. The client runs on the local machine monitoring specified folders. When a change is detected, it propagates to the CrushFTP server, and any other clients subscribed to that folder receive those same changes. Only the modified parts of large files are sent, compression is used to save bandwidth, and bandwidth acceleration can be employed.
• In-Stream Encryption. Files being uploaded can be decompressed while being received, decrypted via PGP, or even encrypted via PGP before ever being written to disk. Since many different protocols can be used for the virtual file system as the back end, data may never be written to a local disk, instead streaming directly to an S3 bucket or Azure location without touching the server disk.
• Expandable Plugins. Numerous plugins are available, and third parties can develop their own. Plugins can have multiple configurations to expand their functionality. Some plugins apply only for authentication, while others apply for post-processing of files or automated tasks. Examples include AutoUnzip for decompressing contents, ContentBlocker for preventing uploads of files with inappropriate extensions, and CrushTask for complex tasks.
• Proxy and Protocol Converter. Incoming connections to CrushFTP can generate secondary connections to other servers based on the original request. The real user does not dictate how the internal request is made; they only request a file download, and CrushFTP initiates that download using the protocol configured with the internal server. Data is never stored locally, it is always streamed. This process allows presenting an SFTP, HTTPS, or FTPES server to users while only having a legacy FTP server on the back end.
• Built-in Reporting. CrushFTP includes multiple reports for monitoring server activity and user actions. They provide summary views of many different areas about the server, as well as details such as the IPs from which a user has connected. The scheduling interface allows running reports on a predefined schedule, so an HTML report can be ready and waiting every morning.
• Reverse Proxy. The CrushFTP web port can be configured as a reverse proxy for a back-end server, forwarding the entire domain to that server. This allows CrushFTP to handle encryption and block denial-of-service attacks while protecting the internal server.
• File Sharing. Users in the WebInterface can share items, creating unique temporary links that can be automatically emailed. The user who shared the item can manage the shares and monitor the usage of the items they have shared. Enterprise licenses allow sharing between other CrushFTP users.
• Integrated SSL Manager. The private key, the certificate request (CSR) sent to the certificate authority, and the imported reply can all be generated and managed from the WebInterface. It is designed to simplify handling the SSL process directly from server administration.
• Real-Time Zip Compression. A user can request a folder as a .zip file instead of downloading each file individually, saving bandwidth and time. The folder is not first created as a .zip file, but is streamed to the user as CrushFTP generates the .zip content. In the WebInterface, users can select individual files or groups to download as a single .zip file. They can also navigate inside a zip file to download individual items, or unzip and zip items entirely on the server side.

Development of CrushFTP is handled by CrushFTP, LLC. The first public version of this software appeared in 1999. The application is primarily written in Java, enabling its execution on multiple operating systems such as macOS, Windows, Linux, Unix, BSD, and Solaris, requiring only a Java 8 virtual machine or higher to function.

Alternatives to CrushFTP:

USBCrypt

USBCrypt is an encryption utility for Windows that secures sensitive information using the AES algorithm.

Price: Free   Size: 6.6 MB   Version: 25.6   OS: Windows

MTF Explorer

MTF Explorer (Multi Tab File Explorer) is a modern file manager for Windows designed to unify workflows across local folders, cloud storage services (AWS S3, Azure, Google Cloud), and remote FTP/SFTP servers within a single dual-pane, tabbed interface.

Price: $8   Size: 131.3 MB   Version: 1.0   OS: Windows

AeroFTP

AeroFTP is a file transfer client developed as a modern alternative to legacy applications.

Price: Free   Size: 16.3 MB   Version: 3.7.0   OS: Windows, Linux, MacOS

Viper FTP

Viper FTP is an application for macOS designed for file management and transfer.

Price: $5   Size: 23.3 MB   Version: 7.0.1   OS: MacOS