Securely automate file transfers between partners, cloud and internal systems.
Edge Gateway, SFTP and Web Transfer Portal included as standard. Self-hosted on your infrastructure. The price you see is the price you pay, no hidden fees, no licensing surprises.
Standard
A complete secure file transfer platform. For IT teams that don’t need enterprise-scale automation.
Billed annually $3,999
Not available on Standard. Optional add-on with Professional, included in Enterprise. Encrypts every browser upload before it leaves the partner’s machine.
Not available on this plan- Edge Gateway Network-edge component that handles inbound transfers safely without exposing internal systems to the public internet.
- SFTP server
- Web Transfer Portal Browser-based upload/download interface for ad-hoc transfers by external users — useful for partners who don’t use SFTP. PGP encryption for Web Transfer is available as an add-on on Professional and included on Enterprise.
- Up to 25 automated workflows Called “transactions” in Diplomat MFT — defined transfer jobs such as nightly ERP exports, partner SFTP feeds or cloud sync workflows. Each is one transaction regardless of how many files it moves.
- Up to 5 File Transfer Server accounts Called “transfer server users” in Diplomat MFT — external accounts that authenticate to your SFTP or Web Transfer server. Typically the partners and customers sending files to you.
- Up to 5 keys per type Cryptographic keys for PGP, SSH and SSL — each type has its own slot count.
Professional
For growing teams that need automation, partner integration and admin controls.
Billed annually $8,499
Every browser upload encrypted at the partner’s browser, before it leaves their machine. No Kleopatra, no key management, no partner training. Just compliance enforced where it matters.
Add-on · $2,999/year- Everything in Standard, plus:
- 1 Remote Agent included Lightweight component installed at remote sites (offices, stores, customer environments) to securely move files back to the central Diplomat MFT instance.
- 1 Cloud Storage Connector included Connects Diplomat MFT directly to cloud storage such as S3, Azure Blob, SharePoint Online, Google Cloud Storage and others (without custom scripting).
- Up to 100 automated workflows Called “transactions” in Diplomat MFT — defined transfer jobs such as nightly ERP exports, partner SFTP feeds or cloud sync workflows. Each is one transaction regardless of how many files it moves.
- Up to 25 keys per type Cryptographic keys for PGP, SSH and SSL, with each type having its own slot count. Professional gives you up to 25 of each, a deciding factor for teams scaling beyond basic partner exchanges.
- Up to 25 File Transfer Server accounts Called “transfer server users” in Diplomat MFT — external accounts that authenticate to your SFTP or Web Transfer server. Typically the partners and customers sending files to you.
- Up to 3 admin accounts with concurrent access support Three administrator accounts on Professional, with all three able to be signed in to the web admin at the same time. Standard supports one admin only. Enterprise has unlimited admin accounts with concurrent access.
- Defined Partners Reusable partner profiles bundling endpoints, credentials and routing rules — set up once, reuse across many transactions.
- Synchronization
- Calendaring, file monitoring, advanced source options
Enterprise
For mission-critical operations that need everything, with no limits.
Billed annually $12,999
Every browser upload encrypted at the partner’s browser, before it leaves their machine. No Kleopatra, no key management, no partner training. Just compliance enforced where it matters.
IncludedWhat's included
Critical Outage (P1) response for all hours outside the Premium Support coverage. Coviant Software designates multiple senior team members highly qualified to provide in-depth technical support to serve as on-call contacts for these critical outage responses around the clock on every day of the year, with authority to draft in additional resources if required.
- Everything in Professional, plus:
- 5 Remote Agents included Lightweight components installed at remote sites (offices, stores, customer environments) to securely move files back to the central Diplomat MFT instance.
- 5 Cloud Storage Connectors included Connects Diplomat MFT directly to cloud storage such as S3, Azure Blob, SharePoint Online, Google Cloud Storage and others (without custom scripting).
- PGP for Web Transfer included Automatic PGP encryption applied to files uploaded through the Web Transfer Portal. Partners upload through the browser, and files are encrypted before they touch your storage. Available as an add-on on Professional, included on Enterprise.
- Proactive Threat Intelligence included Proactive Threat Intelligence blocks file transfer attempts from known-bad sources before they reach your environment, using continuously updated reputation feeds. Not an intrusion-detection or scanning product; the protection is at the connection layer.
- Advanced Authentication (SSO + LDAP + TOTP) included Single Sign-On (SSO) via SAML, LDAP authentication, and web admin TOTP two-factor authentication, bundled. Authenticate users through Okta, Azure AD, Google Workspace or directly against your LDAP directory. All are included on Enterprise.
- Unlimited workflows, users, keys Workflows are called “transactions” in Diplomat MFT. Defined transfer jobs such as nightly ERP exports, partner SFTP feeds or cloud sync workflows. Enterprise removes the cap entirely.
- RBAC, webhook invocation, multiple destinations Role-Based Access Control — granular permissions controlling what each administrator can see and do.
- Pre/Post-job processes
- 24×7 Critical Outage Response
- Paging notifications
Build your plan
Pick a tier, configure add-ons, agents and connectors. The total updates live.
Compare capabilities and capacities
Full edition composition across all three tiers, categorized, searchable, with explanations on tap.
| Feature | Standard | Professional | Enterprise |
|---|---|---|---|
| What you’re actually paying for: the components and add-ons bundled with each tier. | |||
|
Network-edge component for safe inbound transfers without exposing internal systems. Included on every tier, never a checkout add-on. |
|||
|
SFTP service hosted on Diplomat MFT for inbound and outbound transfers. |
|||
|
Browser-based transfer portal for ad-hoc uploads and downloads by external users. |
|||
| Add-on | |||
|
Automatic OpenPGP encryption applied to files uploaded via the Web Transfer Portal. Add-on at $2,999/yr on Professional; included on Enterprise. |
|||
| Add-on | |||
|
Blocks inbound SFTP connections from IPs on continuously updated threat reputation feeds before they touch your transfer server. A mature, production-deployed capability and a longstanding part of Diplomat MFT’s network-edge defense. Not an intrusion-detection product; the protection sits at the connection layer, with no custom firewall maintenance required. Available on Professional, included on Enterprise. |
|||
| Add-on | |||
|
Single Sign-On (SSO) via SAML, LDAP authentication, and TOTP two-factor authentication for the web admin console, bundled together as one add-on. Authenticate users through Okta, Azure AD, Google Workspace or directly against your LDAP directory. Available on Professional as an optional add-on ($1,499/yr); included on Enterprise. |
|||
|
Reusable partner profiles bundling endpoints, credentials and routing rules. |
|||
|
Two-way sync transaction type that keeps two endpoints in lockstep automatically. |
|||
| 1 | 5 | ||
|
Remote Agents included with the tier. Add more via the volume pricing ladder. Standard does not support Remote Agents; Professional caps at 3 total; Enterprise unlimited. |
|||
| 0 | 1 | 5 | |
|
Integrate with various cloud storage providers, including infrastructural storage providers and human-oriented providers. Infrastructural examples include providers such as Microsoft Azure Blob Storage, AWS S3 (and compatible), Google Cloud, Oracle Cloud, and more. Human-oriented providers are along the lines of Microsoft SharePoint, Box, Dropbox, and more. |
|||
| Add-on | |||
|
Critical Outage (P1) response for all hours outside the Premium Support coverage. Coviant Software designates multiple senior team members highly qualified to provide in-depth technical support to serve as on-call contacts for these critical outage responses around the clock on every day of the year, with authority to draft in additional resources if required. |
|||
| How big you can grow across transactions, users, keys, agents and admin headroom per tier. | |||
| 25 | 100 | Unlimited | |
|
Total number of defined transactions (transfer jobs) configurable on the system. |
|||
| 5 | 25 | Unlimited | |
|
Maximum keys per type (PGP, SSH, SSL). Standard now includes 5 fixed slots, replacing the old 2-with-add-on-packs model. Professional steps up to 25 per type, a deciding factor for teams running multi-partner workflows. Enterprise is unlimited. |
|||
| 5 | 25 | Unlimited | |
|
User accounts on your SFTP or Web Transfer server. Mostly used by external partners and customers, but you can also create accounts for internal teams and automated processes. |
|||
| 3 | Unlimited | ||
|
Maximum Remote Agents that can be licensed against the tier. Add via the volume pricing ladder. |
|||
| 1 | 3 | Unlimited | |
|
Total administrator accounts configurable on the system. |
|||
| 1 | 3 | Unlimited | |
|
Number of administrators that can be signed in simultaneously. |
|||
| Who can do what, from where, and how their identities are verified. | |||
|
Restrict administrator login by source IP address or CIDR range. |
|||
|
Separate, named administrator accounts rather than a single shared admin login. |
|||
| Add-on | |||
|
TOTP (e.g. Authenticator app) two-factor authentication for the web admin console. Part of the Advanced Authentication add-on: available on Professional when that add-on is purchased, included on Enterprise. |
|||
|
Granular role definitions controlling what each administrator can see and do. |
|||
|
Persists audit trails to your database for compliance reporting and forensics. |
|||
| How transactions are scheduled, triggered, chained, and how complex your workflows can get. | |||
|
Schedule transactions on calendar-based rules covering business days, holidays, and exclusion windows. |
|||
|
Trigger transactions when files appear, change, or match patterns at a watched location. |
|||
|
Recursive descent, regex matching, exclusion lists and case-sensitivity controls on source file selection. |
|||
|
Define multiple source patterns for a single transaction. |
|||
|
Send the same payload to several destinations in one transaction, useful for distribution, replication and broadcast workflows. |
|||
|
Trigger transactions from external systems via API, command-line or scheduler integration. |
|||
|
HTTP webhook trigger for transactions, providing modern integration with any system that can send a POST. |
|||
|
Chain transactions so completion of one fires the next. Foundation for multi-step workflows. |
|||
|
Suspend a specific transaction or partner without disabling related items. |
|||
|
Dedicated queue for time-critical transactions that must run ahead of routine work. |
|||
|
Run scripts or commands before and after a transaction, for data preparation, notification, and integration with downstream systems. |
|||
|
Archive policy controls beyond the default skip/include behavior. |
|||
| What you can see, prove and pull out for compliance, audit and finance. | |||
|
Quantifies time and cost savings from automation. Useful for renewal-justification conversations with finance. |
|||
|
Automated report delivery to stakeholders on a schedule. |
|||
|
Live dashboard view of in-flight, queued and recently completed jobs. |
|||
|
Topology view of every connection covering sources, destinations, and partners. Helpful for HIPAA and SOC reporting. |
|||
|
End-to-end transaction audit trail covering every hop, partner and transformation. |
|||
|
Per-administrator activity log showing who did what, when, and from where. |
|||
|
Critical-event paging integration for on-call response. |
|||
|
Promote configurations from staging to production environments. |
|||
No features match that search. Try a different term.
Remote Agents: volume pricing
Effective per-agent rate drops from $240 at 1 agent to $84 at 100. Same architecture, six price points.
View detailed pricing table
| Agents | Annual | Per agent | Discount |
|---|---|---|---|
| 1 | $240 | $240 | 0% |
| 5 | $960 | $192 | −20% |
| 10 | $1,560 | $156 | −35% |
| 25 | $3,300 | $132 | −45% |
| 50 | $5,400 | $108 | −55% |
| 100 | $8,400 | $84 | −65% |
What you see is what you pay
Edge Gateway, SFTP and Web Transfer all included. No bolt-ons appearing at checkout, no quote surprises after the demo. The headline price covers the listed scope in full.
Renewal terms you can plan around
You can save money by buying multiple years up front. Rather than running complicated sales tactics, we let you lock in your longer-term license at today’s prices, so you won’t face the usual annual price increases for the duration of that term. If you prefer to pay annually, renewals carry a published cost-of-living adjustment (currently around 5% per year). Either way, you know in advance which path you’re on.
Self-hosted on your terms
Diplomat MFT runs on your infrastructure. No SaaS dependency in your file transfer chain, no hosting markup, no third party between you and your data.
See a typical deployment
Patterns drawn from how Coviant Software customers actually run Diplomat MFT. Find the one closest to your environment.
Sensitive client data, audited and encrypted
Internal systems exchange sensitive client files with banks, legal counterparties and insurance providers on a tight regulatory clock. Encryption, scheduling and audit trail all in one platform.
- SFTP server with secure deployment
- Automated PGP encryption and key management
- Scheduled workflows with full audit trail
Replace patchwork scripts with reliable automation
Daily exchange between ERP, banks and brand-licensing partners. Replacing custom scripts and freeware with secure, standards-based automation that's ready for cloud migration.
- Automated workflows with bank file standards
- PGP for Web Transfer (partner uploads)
- Cloud Storage Connector for hybrid migration
High-volume HIPAA-compliant exchange at scale
Daily exchange across hospitals, payers, federal agencies and hundreds of vendors. Real Coviant Software customers run 2,000+ daily workflows, 1M+ files / month and 180+ managed PGP keys on this configuration.
- Unlimited workflows, users, keys
- Multiple Cloud Storage Connectors and Remote Agents
- RBAC, full audit, automated PGP key management
Twenty internal teams, one transfer platform
Twenty-plus internal departments running mixed on-prem and cloud applications. Scheduled, event-driven and ad-hoc transfers covering everything from POS data to medical reporting on the same platform.
- Event-driven and 15-minute polling workflows
- Cloud Storage Connectors (S3, Azure, SharePoint)
- Full process data capture, archiving and trouble alerts
Why teams switch to Diplomat MFT
Common frustrations with the file transfer setup teams arrive with, and the Diplomat MFT answer.
| What teams arrive with | Diplomat MFT approach |
|---|---|
| Patchwork scripts and freeware that one person quietly maintains without documentation or knowledge transfer | Purpose-built MFT, secure by design, with audit trail and alerting built in |
| Vendor end-of-life decisions you can't control (and can't always plan around) | Stable platform, predictable releases, no forced cloud or platform migrations |
| Quotes from "category leader" MFT vendors that startle the budget meeting | Transparent published pricing with no surprise add-ons appearing late in the quote, no headline-vs-real number gap |
| Tools loaded with bells, whistles and modules you'll never deploy | Operational features that solve real transfer problems, without module sprawl |
| Heavy customization and consulting cycles before you can run a single transfer | Standards-based and works with the SFTP, PGP and cloud infrastructure you already have |
| Features like proactive threat intelligence, Single Sign On, and SharePoint connectors are on their radar, but there's no specific timeline for deployment. | All three are shipping on Diplomat MFT today. Proactive Threat Intelligence runs as a Professional add-on, included on Enterprise. Entra ID SSO is available on Professional and Enterprise. SharePoint Online is one of the cloud storage connectors (one included on Professional, five on Enterprise). All already deployed in production. |
What happens as you grow? Standard isn't a dead-end.
Frequently asked questions
I’m a current Standard customer. What changes for me?
Diplomat MFT 9.5 Standard refreshes the Standard edition for 2026: Edge Gateway, SFTP and Web Transfer are now included as standard rather than separate add-ons. A handful of automation features have moved to Professional. If you’re affected, our team will be in touch directly to walk through your options, including grandfathered pricing, loyalty discounts on a Professional or Enterprise upgrade, or a managed transition to the new Standard.
What are my multi-year pricing options?
Two paths. Pay up front for three years and we lock the unit price for the full term, with no annual increase. Pay annually and a published cost-of-living adjustment applies at each renewal, currently running at around 5% per year. There’s no discount for either path; the choice is about budget certainty versus cash-flow timing. Talk to sales if you’d like to set up multi-year billing.
Is there a discount for committing to a longer term?
You certainly save money when you buy multiple years up front. Rather than apply complicated sales pressure tactics, we simply allow you to lock in your longer-term license at today's prices. You won't be subject to the usual price increases for the duration of that term.
Do I have to host this myself, or is there a SaaS option?
Diplomat MFT is self-hosted: it runs on your infrastructure, on-premises or in your cloud. That’s a deliberate choice: it keeps your data in your environment, removes hosting markup from your costs, and avoids introducing a SaaS dependency in your file transfer chain. There’s no SaaS-hosted version of Diplomat MFT.
How does Diplomat MFT fit with AI compliance obligations like the EU AI Act?
The EU AI Act introduces phased obligations on data flows that interact with AI systems: prohibited AI practices from February 2025, transparency requirements for general-purpose AI models such as LLMs from August 2025, strict governance and technical documentation for high-risk data flows from August 2026, and full sector-specific enforcement from August 2027. The Act has extra-territorial reach. Even if your file transfer infrastructure runs in the US or UK, you fall within scope when the data being transferred is used by an AI system operating within the EU.
Diplomat MFT's role in that picture is intentionally narrow and predictable. It moves files between systems on a deterministic transfer engine, with the audit trail, process visibility, and access controls you need to demonstrate where data went, when, and with what handling. The platform is self-hosted, so your file transfer infrastructure stays on your terms rather than introducing a third-party SaaS dependency into your AI compliance chain. PGP encryption, configurable retention, and detailed logging support data-minimisation and transparency obligations whether you're using AI downstream for security scanning, content classification, or analytics.
Diplomat MFT does not embed proprietary AI inside the file transfer layer itself. AI in your stack stays where you placed it, governed by the policies you set, with Diplomat MFT acting as the documented pipe between data sources and whichever AI systems you choose to integrate. For Coviant's forward direction on AI tooling and integrations, talk to the team and they'll share what's currently in development.
WHAT OUR CUSTOMERS SAY
G2 is the largest and most trusted software marketplace. More than 90 million people annually—including employees at all Fortune 500 companies—use G2 to make smarter software decisions based on authentic peer reviews.
Scott J.
Diplomat MFT has been a powerful workhorse for all of our enterprise file exchange for many years. No other enterprise application we use comes with the same level of support we receive from Coviant.
Eric D.
Director of Information Technology
The support is fantastic. I had to contact them on a few occasions – as it turns out, not for issues with Diplomat MFT but issues with one of the FTP partners. Coviant support stuck with me and went above and beyond to troubleshoot and figure out the issue.
Dave L.
Manager of Information & Technology
Diplomat MFT is a solid data transfer product, its easy to set up, and easy to use. I like the way the transaction builder is laid out. It’s so easy to understand what values it wants.
Adah B.
Extremely robust platform for managing our enterprise file transactions. Every upgrade provides us with additional useful tools to streamline our business processes.
Stephen H.
IT BI Analyst SE
I find the sftp file transfers to be the most helpful tool of Diplomat MFT. No need for programming, the interface is customized already and users only need to fill in the boxes.
Jeff M.
The interface and GUI are very straightforward. The options are simple and labeled so anyone can understand how to set up and configure. The ability to test something without actually sending something is also beneficial.