Diplomat MFT: A Security-First Alternative to SolarWinds Serv-U
Move to secure, proven Diplomat MFT with expert migration support—no downtime, no data loss, no more emergency patches.
Security-First Architecture – Designed with enterprise security as the foundation
Guided Migration Process – Step-by-step migration framework with technical support to ensure a smooth transition from your current solution.
Proactive Security Model – Regular updates without emergency patching cycles
EASY INTEGRATION
Our customers rely on us to integrate and work with their existing healthcare, accounting, HR, financial, and other business software solutions for their secure file transfer needs. Book a personalized demo or get a quote from one of our MFT experts today!
SolarWinds Serv-U MFT vs Diplomat MFT
Why replace SolarWinds Serv-U MFT with Diplomat MFT?
SolarWinds Serv-U is an FTP and managed file transfer server that’s been available since the 1990s, originally developed by RhinoSoft before SolarWinds acquired it in 2012. The platform supports FTP, FTPS, SFTP, and HTTP/S transfers with web and mobile access. However, SolarWinds’ broader security track record has prompted organizations to look more carefully at their vendor relationships and ask harder questions about where their file transfer infrastructure sits.
The Sunburst supply chain attack in 2020 — which the US government described as one of the worst cyber-espionage incidents in history — compromised over 18,000 SolarWinds customers including federal agencies. Serv-U wasn’t directly involved in that incident, but the platform hasn’t escaped scrutiny. CVE-2024-28995, a path traversal vulnerability disclosed in June 2024, allowed unauthenticated attackers to read arbitrary files from the server. Rapid7 described it as “trivially exploitable,” and active exploitation was observed within days of disclosure. For organizations handling sensitive file transfers, these patterns raise legitimate questions about vendor security practices.
Diplomat MFT offers a different approach: 20 years of operation without a single CVE, transparent pricing starting at $1,149/year, and an architecture designed to minimize attack surface from the ground up. Rather than wondering whether your MFT vendor will be the next headline, organizations are choosing platforms with proven security track records and direct access to the engineering teams who built them.
Compare Diplomat MFT with SolarWinds Serv-U MFT
Diplomat MFT offers these advantages over SolarWinds Serv-U MFT *
| FILE TRANSFER SERVER | DIPLOMAT MFT ENTERPRISE | SolarWinds Serv-U MFT | SolarWinds Serv-U FTP Server |
|---|---|---|---|
| Users, Groups, Virtual File System | ✅ | ✅ | ✅ (Limited: 3 domains, 250 users, 100 sessions) |
| User IP Whitelisting | ✅ | ✅ | ✅ |
| File Retention Policies | ✅ | ✅ | ✅ (Basic only) |
| Folder Automation Events | ✅ | ❌ | ❌ |
| Logging, Auditing & Reporting | ✅ | ✅ | ❌ (Basic logging only) |
| 24/7 Severity 1 Support Availability | ✅ | ✅ | ❌ (Email support only) |
| Edge Gateway (Included) | ✅ | ❌ (Separate product) | ❌ (Separate product) |
| OpenPGP File Encryption and Decryption | ✅ | ✅ | ❌ |
| Auto-Rotating PGP Subkeys | ✅ | ❌ | ❌ |
| High Watermark File Detection | ✅ | ❌ | ❌ |
| Cloud Storage Integration | ✅ | ✅ | ❌ |
| Job Monitor Visibility | ✅ | ✅ | ❌ |
| Sync and Replication | ✅ | ❌ | ❌ |
| SFTP Protocol Support | ✅ | ✅ | ❌ (FTP/FTPS only) |
| FIPS 140-2 Validated Cryptography | ✅ | ✅ | ❌ |
| AD/LDAP Authentication | ✅ | ✅ | ❌ |
| Ad-Hoc File Sharing | ✅ | ✅ | ❌ |
| Published Transparent Pricing | ✅ | ✅ (From $335/mo per server) | ✅ (From ~$634) |
| Zero CVEs (20-Year Track Record) | ✅ | ❌ (CVE-2024-28995, CVE-2021-35211) | ❌ (Same CVEs — shared codebase) |
*Research based on publicly available information as of January 2026. SolarWinds Sunburst incident affected the Orion product line, not Serv-U directly, but reflects overall vendor security posture.
Diplomat MFT Security & Migration ROI Calculator
Calculate your cybersecurity risk exposure using IBM breach cost research and configurable probability assumptions. Compare migration costs vs. breach impact with full transparency.Your ROI Analysis
Based on your inputs and industry dataANNUAL RISK EXPOSURE
YEAR 1 MIGRATION COST
3-YEAR NET BENEFIT
📐 How We Calculate This
Breach Cost: From IBM Cost of a Data Breach Report 2024 ($4.88M average; $9.77M healthcare). Breach Probability: Heuristic estimates based on common exposure patterns—these are not published research figures. Use "Advanced Options" to input your own rates if known. Net Benefit: 3-year risk reduction + labor savings − total 3-year cost (Year 1 + 2 renewal years).Current State vs. Post-Migration
| Metric | Current State | Post-Migration |
|---|---|---|
| Annual Breach Risk | - | - |
| Weekly Admin Hours | - | - |
| Compliance Automation | - | Automated |
| Vendor Support | - | Highly rated on G2 (as of Jan 2026) |
See What Diplomat MFT Can Do For Your Organization
You've seen the potential risk reduction and cost savings—now take the next step.
Diplomat MFT gives you enterprise-grade security, complete visibility, and powerful automation—without the complexity and vulnerabilities of legacy systems.
Ready to protect your data and reclaim your IT team's time?
MFT Migration Service:
Here’s an Overview of How It Works
Our MFT Migration Service provides a structured approach to help you seamlessly transition from your existing file transfer solution to Diplomat MFT. Many of the world’s largest organizations in industries like healthcare, financial services, retail, and more trust Coviant Software with their most sensitive file transfers. You can, too.
Step 1: Initial Discussion
In a 1–2-hour virtual session, our MFT experts meet with your team to understand your current file transfer setup. We identify which file transfer workflows should be migrated, and how you can do it easily and effectively.
Step 2: Deliver Tailored Migration Plan
We review what we’ve learned and prepare a clear, actionable Statement of Work (SOW)—outlining timeframes, required resources, and what you can expect.
Step 3: Review & Decide
You evaluate the SOW at your own pace. Need more clarity? We’re happy to consult further—at no cost.
Step 4: Fast, Professional Delivery
Once approved, we can quickly start assisting with your migration. We keep in close contact throughout the process, with regular updates and zero guesswork.
Step 5: Final Review & Sign-Off
We walk through the results with you to ensure everything meets expectations. Only when you’re satisfied do we consider the job done.
If you have questions, please reach out to schedule a discussion and quick demonstration of Diplomat MFT. Or you can take Diplomat MFT for a free 15-day test drive with no obligations.
Understanding the features and benefits of the technologies
SolarWinds Serv-U MFT Server supports file transfers via FTP, FTPS, SFTP, HTTP and HTTPS over both IPv4 and IPv6 networks. The platform has been available since the 1990s, originally developed by RhinoSoft before SolarWinds acquired it in 2012. It depends on the protocol you are using or need for your organization that will determine the best protocol to use. Generally, SFTP (Secure File Transfer Protocol) is the safest and most secure protocol to use.
Employs SFTP and OpenPGP encryption for highest security
Calendar exclusions prevent transfers on bank holidays
Reducing risk of human error by automating transfers
Robust scheduler for easy configuration of transfer times
Full audit trails, file archiving, and notifications
Integrates with various protocols (SFTP, FTPS, AS2, HTTPS)
What does “Enterprise” file transfer really mean?
The term “enterprise” implies a product has the features, capacity, and job management capabilities to handle the demands of the largest organizations. With managed file transfer software, that means automating the largest file transfers to an extensive digital supply chain, doing it securely and reliably, and keeping pace no matter how your needs expand. It also means including enterprise-class features such as full auditing, alerting, data archiving and retention, directory management integration, PGP encryption management, and 24×7 support. We’ve helped a lot of organizations that found SolarWinds Serv-U MFT fell short of those expectations. And so, if you’re looking for an alternative to SolarWinds Serv-U and need an MFT solution that has been proven in the most demanding enterprise environments—and is ready for more—take a look at Diplomat MFT. You’ll be glad you did.
What's new in Diplomat MFT?
Key Diplomat MFT enhancements include:
Secure, Browser-Based File Transfers: Allows your partners to simply use a standard web browser. Just send a URL and login credentials. No third-party tools, no software, no training needed.
Automated PGP Browser-Based File Transfers: Mandate PGP policy across your entire information supply chain, removing complexity and enhancing security.
Threat Intelligence: Real-time blocking of malicious IP addresses with automated threat detection to prevent intrusions and advanced persistent threats.
IP Access Rules: Granular control to block high-risk IP addresses, ensuring only trusted users and networks have access.
PGP Enforcement Rules: Automatically removes files that aren't PGP encrypted, preventing exposure of sensitive information and ensuring data protection compliance.
SFTP Connections Report: Complete visibility into file access for compliance audits and security monitoring with full transparency.
Syslog Logging: Centralized monitoring of all system logins to identify suspicious activity across the entire network.
Zoho WorkDrive Transport Type: Easy integration and automated file transfers to Zoho WorkDrive, reducing manual work and errors.
Expanded RegEx: More flexibility in organizing file names and file types, reducing manual sorting and errors.
Connection Map Report: Visual documentation of data flow for compliance (HIPAA, etc.) showing connections between systems made by Diplomat MFT.
Granular Permissions and Custom Roles: Fine-tuned access control for improved security and regulatory compliance with role-based security.
Support for SSO (Single Sign-On) for Administrators: Simplifies administrator login, centralizes user management, and reduces administrative overhead.
If you have questions, please reach out to schedule a discussion and quick demonstration of Diplomat MFT. Or you can take Diplomat MFT for a free 15-day test drive with no obligations.
Years of experience
Individual transfers per day
Terabytes transferred per day
Concurrent jobs
Years of experience
Individual transfers per day
Terabytes transferred per day
Concurrent jobs
Choose from 3 Editions
We have three editions of Diplomat MFT to suit varying business requirements and budgets.
Standard
Billed annually $3,999
Not available on Standard. Optional add-on with Professional, included in Enterprise. Encrypts every browser upload before it leaves the partner’s machine.
Not available on this plan- Edge Gateway Network-edge component that handles inbound transfers safely without exposing internal systems to the public internet.
- SFTP server
- Web Transfer Portal Browser-based upload/download interface for ad-hoc transfers by external users — useful for partners who don’t use SFTP. PGP encryption for Web Transfer is available as an add-on on Professional and included on Enterprise.
- Up to 25 automated workflows Called “transactions” in Diplomat MFT — defined transfer jobs such as nightly ERP exports, partner SFTP feeds or cloud sync workflows. Each is one transaction regardless of how many files it moves.
- Up to 5 File Transfer Server accounts Called “transfer server users” in Diplomat MFT — external accounts that authenticate to your SFTP or Web Transfer server. Typically the partners and customers sending files to you.
- Up to 5 keys per type Cryptographic keys for PGP, SSH and SSL — each type has its own slot count.
Professional
Billed annually $8,499
Every browser upload encrypted at the partner’s browser, before it leaves their machine. No Kleopatra, no key management, no partner training. Just compliance enforced where it matters.
Add-on · $2,999/year- Everything in Standard, plus:
- 1 Remote Agent included Lightweight component installed at remote sites (offices, stores, customer environments) to securely move files back to the central Diplomat MFT instance.
- 1 Cloud Storage Connector included Connects Diplomat MFT directly to cloud storage such as S3, Azure Blob, SharePoint Online, Google Cloud Storage and others (without custom scripting).
- Up to 100 automated workflows Called “transactions” in Diplomat MFT — defined transfer jobs such as nightly ERP exports, partner SFTP feeds or cloud sync workflows. Each is one transaction regardless of how many files it moves.
- Up to 25 keys per type Cryptographic keys for PGP, SSH and SSL, with each type having its own slot count. Professional gives you up to 25 of each, a deciding factor for teams scaling beyond basic partner exchanges.
- Up to 25 File Transfer Server accounts Called “transfer server users” in Diplomat MFT — external accounts that authenticate to your SFTP or Web Transfer server. Typically the partners and customers sending files to you.
- Up to 3 admin accounts with concurrent access support Three administrator accounts on Professional, with all three able to be signed in to the web admin at the same time. Standard supports one admin only. Enterprise has unlimited admin accounts with concurrent access.
- Defined Partners Reusable partner profiles bundling endpoints, credentials and routing rules — set up once, reuse across many transactions.
- Synchronization
- Calendaring, file monitoring, advanced source options
Enterprise
Billed annually $12,999
Every browser upload encrypted at the partner’s browser, before it leaves their machine. No Kleopatra, no key management, no partner training. Just compliance enforced where it matters.
IncludedWhat's included
Critical Outage (P1) response for all hours outside the Premium Support coverage. Coviant Software designates multiple senior team members highly qualified to provide in-depth technical support to serve as on-call contacts for these critical outage responses around the clock on every day of the year, with authority to draft in additional resources if required.
- Everything in Professional, plus:
- 5 Remote Agents included Lightweight components installed at remote sites (offices, stores, customer environments) to securely move files back to the central Diplomat MFT instance.
- 5 Cloud Storage Connectors included Connects Diplomat MFT directly to cloud storage such as S3, Azure Blob, SharePoint Online, Google Cloud Storage and others (without custom scripting).
- PGP for Web Transfer included Automatic PGP encryption applied to files uploaded through the Web Transfer Portal. Partners upload through the browser, and files are encrypted before they touch your storage. Available as an add-on on Professional, included on Enterprise.
- Proactive Threat Intelligence included Proactive Threat Intelligence blocks file transfer attempts from known-bad sources before they reach your environment, using continuously updated reputation feeds. Not an intrusion-detection or scanning product; the protection is at the connection layer.
- Advanced Authentication (SSO + LDAP + TOTP) included Single Sign-On (SSO) via SAML, LDAP authentication, and web admin TOTP two-factor authentication, bundled. Authenticate users through Okta, Azure AD, Google Workspace or directly against your LDAP directory. All are included on Enterprise.
- Unlimited workflows, users, keys Workflows are called “transactions” in Diplomat MFT. Defined transfer jobs such as nightly ERP exports, partner SFTP feeds or cloud sync workflows. Enterprise removes the cap entirely.
- RBAC, webhook invocation, multiple destinations Role-Based Access Control — granular permissions controlling what each administrator can see and do.
- Pre/Post-job processes
- 24×7 Critical Outage Response
- Paging notifications
Try Diplomat MFT for yourself
Every evaluation is different. That's why we build yours around your requirements — not a one-size-fits-all process.
Share your requirements with us
Every organization has unique file transfer challenges. In a short call, our team will learn about your specific protocols, endpoints, compliance needs and integrations — so we can shape your entire evaluation around what matters most to you.Watch a tailored demonstration
No generic walkthroughs. We'll demonstrate Diplomat MFT configured to your environment and workflows, so you can see exactly how it addresses your requirements before you invest any time in setup.Start your trial and evaluate with expert guidance
We cut the learning curve. Our team helps you install and configure a full-featured trial tailored to your requirements — so you spend your time validating, not troubleshooting. Your trial is time-limited, not function-limited.Decide with confidence
Once your evaluation is complete, we'll review the results together against your original requirements. You'll have everything you need to make an informed decision — with no obligation to purchase.FREQUENTLY ASKED QUESTIONS
What's the difference between SolarWinds Serv-U MFT and Serv-U FTP Server?
SolarWinds sells Serv-U as two separate products at different price points. Serv-U FTP Server is the entry-level option — it supports FTP and FTPS only (no SFTP), caps you at 3 domains, 250 users and 100 concurrent sessions, and strips out features like folder automation, cloud storage integration, OpenPGP encryption, FIPS 140-2 validated cryptography, and AD/LDAP authentication. Logging is basic and support is email-only. Serv-U MFT is the full platform with SFTP support, OpenPGP, cloud storage integration, and more complete auditing — but it still lacks features Diplomat MFT includes as standard, such as auto-rotating PGP subkeys, high watermark file detection, sync and replication, and an included edge gateway. Diplomat MFT Enterprise replaces either Serv-U product with a single platform that covers the full feature set of both — plus capabilities neither tier offers.
What are the key differences between SolarWinds Serv-U and Diplomat MFT?
The most significant difference is security track record. SolarWinds as a company suffered the Sunburst supply chain attack in 2020, which the US government called one of the worst cyber-espionage incidents in history — affecting over 18,000 customers including federal agencies. Serv-U itself had CVE-2024-28995, a path traversal vulnerability that was actively exploited within days of disclosure, allowing unauthenticated attackers to read any file on the server. Diplomat MFT has operated for 20 years without a single CVE.
Beyond security, the platforms differ on what’s included. Diplomat MFT’s Enterprise edition includes the Edge Gateway. Serv-U’s Gateway is a separate product requiring additional licensing. Diplomat MFT publishes transparent pricing starting at $1,149/year; Serv-U pricing starts around $3,827 for the MFT edition but varies based on configuration. Diplomat MFT also offers capabilities Serv-U lacks: auto-rotating PGP subkeys that eliminate annual key rotation exercises, and high watermark file detection for polling remote servers where you cannot delete source files after transfer.
We're concerned about SolarWinds security after Sunburst. Was Serv-U affected?
Serv-U wasn’t part of the Sunburst supply chain attack — that specifically targeted SolarWinds Orion network monitoring software. However, Serv-U has had its own security issues. CVE-2024-28995, disclosed in June 2024, was a path traversal vulnerability rated 8.6 severity that allowed unauthenticated attackers to read arbitrary files from the server. Rapid7 described it as “trivially exploitable.” The vulnerability was actively exploited in the wild within days of disclosure, with GreyNoise observing attack traffic from multiple countries targeting honeypot servers.
Earlier, in 2021, Serv-U had CVE-2021-35211, a zero-day that was exploited against a “limited, targeted” set of customers before a patch was available. The pattern matters: MFT platforms are high-value targets for ransomware groups, as demonstrated by the Cl0p attacks on MOVEit, GoAnywhere, and Accellion. Diplomat MFT’s architecture minimizes attack surface by not exposing management services on network ports by default and running with minimal privileges rather than as root or SYSTEM.
Serv-U reviews mention support problems. What's Diplomat MFT's support model?
Support is a consistent pain point in Serv-U reviews. One reviewer on Software Advice reported a critical support ticket open for six months with no response, despite reaching out three times per week. They eventually had to contact product management via LinkedIn to get any acknowledgment. Another common complaint: Serv-U is an “afterthought” within SolarWinds’ broader product portfolio, which means it doesn’t receive the same attention as their core monitoring tools.
Diplomat MFT operates differently. Support goes directly to the engineering team who built the platform — there’s no tiered queue separating you from the people who actually understand the code. Migration customers get direct access to the implementation team throughout the process. When something goes wrong with a file transfer, Diplomat MFT automatically includes debug logs in notification emails, so you often have the information needed to diagnose issues before opening a ticket.
SolarWinds had the supply chain attack. How do we know Diplomat MFT is more secure?
Fair question — any vendor can suffer a breach. The difference is in architecture, track record, and how the company responds to security research.
On architecture: Diplomat MFT doesn’t expose management services on network ports by default. The Edge Gateway, included in Enterprise edition, provides DMZ isolation so your internal MFT server never receives direct internet connections. Session structures are encrypted and validated rather than using executable formats that could enable deserialization attacks.
On track record: 20 years of operation without a single CVE. That’s not because no one’s looking — MFT platforms are actively targeted by threat actors and security researchers alike.
On response: Coviant Software is a focused MFT company, not a sprawling enterprise software vendor where file transfer is a side product. When security is your core business rather than one product among dozens, it receives different attention.
We've invested in Serv-U automation workflows. How difficult is migration?
Serv-U’s automation capabilities are more limited than enterprise MFT platforms — Gartner’s MFT Market Snapshot 2021 didn’t include Serv-U, and analysts have noted it lacks the workflow automation that defines true managed file transfer. Many Serv-U users end up creating Windows scheduled tasks with external scripts because the built-in event system is too constrained.
Migration to Diplomat MFT typically involves mapping your source and destination endpoints, schedules, file patterns, encryption settings, and notifications. If you’re already using external scripts for automation, those same scripts can integrate with Diplomat MFT’s trigger system or be replaced by native functionality. Organizations often discover during migration audits that they have redundant or unused transfer processes — the City of Los Angeles found this when migrating from GoAnywhere, turning migration into an opportunity to clean house. Diplomat MFT’s interface was designed for IT professionals; the learning curve is minimal for anyone familiar with enterprise administration.
WHAT OUR CUSTOMERS SAY
G2 is the largest and most trusted software marketplace. More than 90 million people annually—including employees at all Fortune 500 companies—use G2 to make smarter software decisions based on authentic peer reviews.
Scott J.
Diplomat MFT has been a powerful workhorse for all of our enterprise file exchange for many years. No other enterprise application we use comes with the same level of support we receive from Coviant.
Eric D.
Director of Information Technology
The support is fantastic. I had to contact them on a few occasions – as it turns out, not for issues with Diplomat MFT but issues with one of the FTP partners. Coviant support stuck with me and went above and beyond to troubleshoot and figure out the issue.
Dave L.
Manager of Information & Technology
Diplomat MFT is a solid data transfer product, its easy to set up, and easy to use. I like the way the transaction builder is laid out. It’s so easy to understand what values it wants.
Adah B.
Extremely robust platform for managing our enterprise file transactions. Every upgrade provides us with additional useful tools to streamline our business processes.
Stephen H.
IT BI Analyst SE
I find the sftp file transfers to be the most helpful tool of Diplomat MFT. No need for programming, the interface is customized already and users only need to fill in the boxes.
Jeff M.
The interface and GUI are very straightforward. The options are simple and labeled so anyone can understand how to set up and configure. The ability to test something without actually sending something is also beneficial.