Yes. ProVide is a secure SFTP and FTPS server built for organizations that take file transfer seriously, and it can be configured to earn a top A+ score on the official Qualys SSL Labs test. Security is layered in rather than bolted on.
- TLS 1.2 and TLS 1.3, with older protocols (SSL v2, SSL v3, TLS 1.0, TLS 1.1) disabled by default and every version individually configurable
- Modern AEAD cipher suites with forward secrecy, each individually configurable, served in a server-enforced preference order
- Prioritised modern elliptic curves for key exchange, including X25519
- HTTP Strict Transport Security (HSTS)
- Full certificate-chain loading, including intermediate certificates
- Secure renegotiation, with client-initiated renegotiation disabled
Requirements for a Perfect score at the Qualys SSL Labs official test
- The latest version of ProVide
- A purchased certificate — either RSA-4096 or ECDSA-P384
- For step-by-step instructions, see Achieving high security
Out of the box it includes:
- Brute-force protection (anti-hammering) to block repeated login attempts.
- User impersonation, so each session runs with only that user’s permissions.
- Extensive logging for auditing and traceability.
- Full support for FTPS (TLS/SSL) and SFTP (v3 to v6), with a wide range of encryption algorithms.
- Your choice of self-signed or purchased certificates.
- HTTP Strict Transport Security (HSTS), plus the ability to enable or disable individual SSL/TLS protocols so you can lock the server to the versions your policy allows.
The people who rely on it say a lot too. ProVide is used by research labs, government bodies, Fortune 500 companies, defense contractors, and payment transaction firms, and it has passed 3 million downloads.
