ExaVault

ExaVault is a self-hosted appliance for teams that need controlled file exchange inside their own datacenter, VPC, or isolated network. It is strongest when an organization already operates virtual infrastructure and identity systems, and less suitable when a provider-managed service is the priority. The central decision is whether the administrative control justifies owning deployment, security, and compliance work.

Overview

ExaVault launched in 2009 and was acquired by Files.com in 2022. ExaVault Cloud has been retired, while the self-hosted appliance continues to be shipped and maintained. This is therefore a current infrastructure product, not a hosted successor to the former cloud service. Teams wanting a turnkey web transfer service should look elsewhere; teams with datacenter, VPC, or air-gapped requirements get a product aligned with those constraints.

Key features

FTP, SFTP, FTPS, and WebDAV support covers both conventional FTP workflows and encrypted or WebDAV-based integrations. A browser file manager adds user and group administration, folder permissions, share links, notifications, and activity records, so routine exchange can be managed without giving every participant direct server access. Password protection and custom link-expiration settings provide practical controls for shared files, while audit logs help reconstruct activity.

SAML, SCIM, Active Directory, and LDAP integrations address organizations that need centralized authentication and provisioning. Paid licensing adds SAML SSO, optional SCIM, SMS two-factor authentication, automatic SSL, automatic updates, and SIEM syslog export. Those additions make the paid edition materially better for managed identity and monitoring; the free edition is more appropriate for smaller deployments that can accept self-serve administration and fewer operational integrations.

Deployment targets include VMware vSphere, AWS Marketplace, Google Cloud Marketplace, and Microsoft Azure Marketplace. Hyper-V is supported by converting the VMware image. The appliance requires a 64-bit Intel processor with four cores, 12 GB of RAM, a 100 GB primary disk, and a separate data drive; ARM processors are not supported. Encryption in transit is included, but encryption at rest comes from the customer's VM environment. Likewise, responsibility for SOC 2, HIPAA, GDPR, FedRAMP, and FIPS compliance remains with the organization operating the appliance.

Pricing

The free tier is unusually practical for a small organization because there is no expiry, but the 50-account ceiling is firm and a paid license is required beyond it. Paid licensing is sold in 50-user blocks, so organizations near a threshold should budget for the full pack rather than individual seats. Enterprise is aimed at teams that need around-the-clock assistance and help with rollout or SIEM work, not merely more accounts. There is no free trial, making the permanent free edition the available evaluation path.

Platforms

ExaVault runs as a self-hosted virtual appliance on VMware vSphere or through AWS, Google Cloud, and Azure marketplaces. Hyper-V users must convert the VMware image. A web interface is included, but the product is not an ARM option and is not a conventional desktop or mobile client.

Who it's for

Choose ExaVault when policy or architecture requires file transfer to remain in infrastructure your organization controls, including private VPCs and air-gapped networks. It fits IT teams able to provide the stated Intel-based VM resources, operate identity integrations, and handle encryption-at-rest design and regulatory evidence. It is a weaker choice for small teams without infrastructure staff, or for anyone seeking hosted storage, automatic compliance coverage, or broad client-platform apps.

Pros and cons

Pros

• Broad protocol coverage: FTP, SFTP, FTPS, and WebDAV accommodate mixed legacy and modern workflows.
• Strong administration: Permissions, groups, password-protected links, expiration controls, notifications, and audit records support governed sharing.
• Deployment flexibility: Marketplace images and VMware support cover datacenter and major-cloud environments.
• Permanent free edition: Up to 50 users can run the appliance without an expiry date.

Cons

• Operational ownership: Customers supply the VM environment, encryption at rest, and compliance controls.
• Hard capacity boundary: More than 50 users requires a paid 50-user pack.
• Limited evaluation model: There is no free trial, and ARM processors are unsupported.
• Cloud service discontinued: Organizations wanting hosted ExaVault must consider other products.

Alternatives

SendSafely is a better fit for browser, mobile, desktop, and API access, with a free plan and a Basic tier at $10 a month for 250 MB per month and expiration controls. Pick FileZilla Client for a free Linux, macOS, or Windows client focused on FTP, FTPS, and SFTP rather than a multi-user appliance. WinSCP is the free, open-source Windows choice when SFTP, FTP, FTPS, SCP, WebDAV, and S3 protocols are needed in a client.

CrushFTP suits buyers wanting a paid, self-hosted-capable product with a trial and broad platform coverage; its Small Business plan is $70 a month with perpetual licensing and 250.00 USD yearly maintenance after the first year. MASV is preferable for hosted, pay-as-you-go large-file delivery: 15 GB is free each month, then usage is 0.25 USD per GB. OnionShare is a free option for privacy-oriented direct sharing across desktop platforms. Tresorit provides encrypted cross-platform storage and links, while TransferNow offers hosted transfers with a free 5 GB-per-transfer plan and seven-day availability.

Verdict

ExaVault is a sound choice for organizations that need a maintained file-transfer appliance inside infrastructure they control, especially where protocol compatibility, centralized identity, and auditability matter. Its free 50-user edition lowers the entry cost, and paid tiers add the support and operational integrations larger environments need. Look elsewhere if you want a hosted service, ARM support, client apps, or a provider to carry the main burden of security and compliance.