Managed file transfer (MFT) · Version 1.7 · Made in the EU
Emona MFT moves files between branches, partners and business systems automatically: hashed, compressed, encrypted and delivered to a central server you control. A calm, modern replacement for fragile FTP and SFTP scripts, built for small and mid-size businesses that don't need a heavyweight enterprise MFT suite.
How it works
A lightweight client watches one or more folders. Drop a file in, and it is picked up automatically.
A file is sent only once it has stopped changing. It gets a SHA-256 fingerprint, is GZIP-compressed and encrypted with a key unique to that client: with Emona MFT, using AES-256-GCM over a mutually authenticated connection, optionally with a post-quantum key exchange.
The central server identifies the client, decrypts the file, verifies its hash and stores it in that client's own directory in one atomic step, optionally encrypted. By default a name clash gets a numbered name instead of overwriting. Only then is the original removed.
With Emona MFT, all licensed servers connect to a web dashboard: servers and clients online, transfers, problems, free disk space, alerts and incidents in one place, and every event can go to your SIEM. See the dashboard.
Features
The transfer engine is source-available and free for noncommercial use. Emona MFT 1.7 adds an authenticated, encrypted protocol with an optional post-quantum key exchange, encrypted storage, tamper-evident logs and a dashboard that every licensed server connects to, for the visibility and control businesses need.
Protocol 2, the default, authenticates client and server before any file data is sent, encrypts file names and content with AES-256-GCM using fresh session keys per connection, and stops replayed transfers. Client keys can be changed without downtime.
The optional protocol 3 adds a hybrid X25519 + ML-KEM-768 key exchange (NIST FIPS 203) to every connection, with forward secrecy: recorded traffic stays protected even if a key leaks later. A server accepts protocols 2 and 3 side by side, so clients move one by one, and a client never falls back to a weaker protocol.
Waits until files are complete, retries with backoff, and rejects unsafe or Windows-reserved file names and symbolic links. Name conflicts are handled your way: numbered rename (default), atomic overwrite, append, or reject. The server refuses files that would fill its storage disk.
Every Emona MFT installation includes at least one dashboard instance, and all licensed servers connect to it. See who is online, search transfers and export them to CSV, get alerts by e-mail or syslog, and keep every alert in an incident register. This is the key difference from jFiltra. Dashboard details.
Optionally store received files encrypted with AES-256-GCM, with a separate key for each file, and decrypt or check them with the included tool. Delete received files automatically after a set number of days per client, with a dry run first, and give them restricted permissions.
Servers, clients and the dashboard write hash-chained, sealed event and audit logs and check them every hour. Every line can go to your SIEM or log server over syslog (UDP, TCP or TLS), and lines written during an outage are sent afterwards.
Dashboard sign-in with an authenticator app and recovery codes, or single sign-on through Microsoft Entra ID, Okta, Keycloak or any OpenID Connect provider. Viewer, auditor, operator and admin roles, optionally limited to some clients.
Send only matching files with masks such as *.csv; report_??.txt, choose the order (oldest, smallest or by name), or run the client once from cron or a scheduler with clear exit codes.
Runs on your own servers, on-premise or in your private cloud, with no telemetry. Your files and logs stay on infrastructure you control, and the dashboard licence is checked offline.
Dashboard
The dashboard comes with every Emona MFT order. See who is online, what was stored and what failed, how much disk space is left, and which alerts are open. Search transfers and export them to CSV, handle incidents with notes and history, and check the hash-chained audit log. Sign in with two-factor authentication or single sign-on.
GDPR and NIS2
Emona MFT 1.7 records what happened, who handled it and when, and makes later changes to those records detectable. It gives you the controls and documents for your part; the measures around it, and the decisions, stay with you.
Every alert becomes an incident with acknowledgement, resolution, notes and full history, kept for three years by default. Export a period as CSV or JSON for an early warning, a notification or a final report under NIS2 Art. 23.
Internal or external auditors and data protection officers get read access to the audit log and the incident register, and can export them, without admin rights or the ability to change anything.
File names can be written to the event log as keyed hashes instead of names (pseudonymisation), retention deletes old received files per client, and a documented procedure covers erasure under GDPR Art. 17.
Documents for your records, supplied with your licence on request: GDPR Art. 32 technical and organisational measures, NIS2 Art. 21 and 23 mapping, data flow and data location, hardening guide, backup and recovery runbook, access control statement and erasure procedure.
Each release comes with SHA-256 checksums signed offline with ML-DSA-65 (FIPS 204, post-quantum) and ECDSA P-256, and a CycloneDX SBOM. CodeQL, Dependabot and a weekly dependency check watch the code and its two libraries.
Vulnerability reports are acknowledged within 3 working days. Fixes for critical and high severity follow within 30 days of confirmation, sooner when a problem is actively exploited. Security details.
Emona MFT is not certified, and the documents are not legal advice. They describe what the product does and which measures stay with you.
Free vs paid
| Capability | jFiltra Free for noncommercial use · PolyForm Noncommercial · commercial 100 € / server | Emona MFT Commercial · from 500 € per server · pricing |
|---|---|---|
| Server with multiple clients | ||
| Folder watching & automatic sending | ||
| SHA-256 integrity check, GZIP, AES encryption | ||
| File masks, send order, one-time run, name-conflict modes | ||
| Separate storage per client | ||
| Mutual authentication, AES-256-GCM, replay protection (protocol 2) | ||
| Post-quantum key exchange with forward secrecy (protocol 3) | ||
| Key rotation without downtime | ||
| Free-disk-space reservation on the server | ||
| Encrypted storage and retention of received files | ||
| Tamper-evident event logs, syslog and SIEM forwarding | ||
| Web dashboard included – every licensed server connects to it | ||
| Two-factor sign-in, single sign-on, incident register, auditor role | ||
| Signed releases, SBOM and compliance pack | ||
| Support | Community (GitHub) | Human support from BLUEGEM: an answer within 2 hours during Bratislava business hours |
Current versions: Emona MFT 1.7.0, jFiltra 1.1.4. Emona MFT always includes at least one dashboard instance; this is the key difference from jFiltra. jFiltra also has a DB client that sends the results of an SQL query as CSV, TSV or JSON Lines files. See pricing.
Support
When you write to us, a person from the BLUEGEM team answers: the engineers who build Emona MFT, not a bot.
Your questions go straight to the engineers who build the product, from installation and integration to upgrades.
We respond within 2 hours during Bratislava business hours (Central European Time).
Included with support (20 % of the licence price per year) and with a subscription. Installation is included with every Emona MFT licence. Support terms.
Launch offer
The first 20 customers get 40 % off Emona MFT and jFiltra licences in the first year. Support, subscriptions and extra installation days are charged at list price. Prices are final in EUR; BLUEGEM is not a VAT payer.
Guides
Plain-English guides for small IT teams, with sources.
When a secure SFTP server is enough, and when you need automation, monitoring and an audit trail.
Read the guide →A fair comparison of self-hosted, open-source and cloud options for small and mid-size businesses.
Read the comparison →How jFiltra and Emona MFT protect your files, and their technical limits.
Read more →FAQ
jFiltra is the source-available transfer engine, free for noncommercial use: clients watch folders, or run an SQL query, and send files to a central server, without transport encryption, so it is meant for trusted networks, a VPN or an SSH tunnel. Emona MFT is the commercial product built on top of it. Every Emona MFT installation includes at least one web dashboard instance to which all licensed servers connect. It also adds protocol 2, which authenticates client and server, encrypts file names and content with AES-256-GCM and prevents replay, the optional post-quantum protocol 3, encrypted storage and retention, tamper-evident logs with SIEM forwarding, and human support from BLUEGEM.
No. Emona MFT is self-hosted and has no telemetry. Files travel from your clients to your own server, the dashboard runs on your infrastructure too, and its licence is checked offline.
Launch offer: 40 % off licences in the first year for the first 20 customers. List prices are in EUR with no VAT (BLUEGEM is not a VAT payer): 500 € per Emona MFT server plus a dashboard from 900 € (S, 1 server) to 5 000 € (L, up to 10 servers), perpetual, with unlimited clients and users. Support is 20 % of the licence per year, required in the first year. A subscription costs 40 % of the licence per year, support included. See pricing and the price calculator.
Yes. Emona MFT 1.7.0 is the current release, with the dashboard included. Choose your configuration and send your order on the pricing page. There is no payment with the form; we confirm your order by email and install it with you.
Human support from the BLUEGEM team that builds Emona MFT: real people, no bots. We respond within 2 hours during Bratislava business hours (Central European Time). Support costs 20 % of the licence price per year, is required in the first year and is included in a subscription; it covers updates, security patches and help by e-mail.
Yes, for the file transfers it handles. Emona MFT 1.7 has tamper-evident event, audit and incident logs, SIEM forwarding, two-factor sign-in and single sign-on, optional encryption of stored files, retention per client, an incident register and an auditor role. Its compliance pack, supplied with your licence on request, describes the GDPR Art. 32 measures, the NIS2 Art. 21 and 23 mapping, data flows, hardening, backup and erasure. Most measures around it remain yours: the product is not certified, and the documents are not legal advice.
Yes, as an option. Protocol 3 adds a hybrid post-quantum key exchange (X25519 + ML-KEM-768, NIST FIPS 203) with forward secrecy to every connection. A server can accept protocols 2 and 3 at the same time, so clients can move one by one; protocol 2 stays the default. Releases are signed with ML-DSA-65 (FIPS 204) and ECDSA P-256.
Emona MFT and the jFiltra core need Java 8 or newer, Apache Log4j 2, and Bash (Linux, macOS) or the Windows Command Prompt for their scripts. Protocol 3 of Emona MFT also needs the Bouncy Castle library on server and client. Both are tested on OpenJDK 8, 11, 17, 21 and 25, for example Eclipse Temurin or your Linux distribution's packages, and their scripts use JAVA_HOME when it is set. For Emona MFT, Java 21 or 25 LTS is recommended, and server and clients may run different Java versions. On Linux and macOS, jFiltra needs a UTF-8 locale; its scripts select one automatically when it is installed.
Yes. jFiltra 1.1.4, with its source code, setup guide and license, is on GitHub. Besides the file client it has a DB client that sends the results of an SQL query as CSV, TSV or JSON Lines and then runs your follow-up SQL, tested with PostgreSQL, MySQL and MariaDB. It is free for noncommercial use under the PolyForm Noncommercial 1.0.0 license. For commercial use, choose Emona MFT or contact BLUEGEM.
An SFTP server moves files over an encrypted connection, but you still have to script the sending, retries, checks and reporting yourself. Managed file transfer (MFT) adds that layer: automated sending, integrity checks, central monitoring, alerts and an audit trail. Emona MFT gives small teams that layer without the size and cost of an enterprise MFT suite. Read the full MFT vs SFTP comparison.
For many small and mid-size businesses, yes. Enterprise suites cover large partner networks and many protocols. Emona MFT focuses on one job, moving files securely and automatically between your own sites and systems, and makes it easy to run and monitor on your own server. See our fair comparison of GoAnywhere and MOVEit alternatives.
Emona was the Roman fortified camp where Ljubljana stands today: a protected hub where roads met. That is exactly the role Emona MFT plays for your files.