Every capability built to enterprise specification — security, compliance, and automation from the ground up, not bolted on.
Nine first-class features, all included at every licence tier. Nothing gated behind an add-on.
Files move directly between stations over WebRTC DataChannels. No cloud intermediary sees your data — not even the signaling server.
WebRTC DataChannelsEvery station holds an Ed25519 keypair. Connections are mutually authenticated before a single byte transfers. No passwords, no shared secrets.
Ed25519 keypairsChoose AES-256-GCM for FIPS-aligned deployments or ChaCha20-Poly1305 for edge environments. Data is encrypted at source before leaving the station.
AES-256-GCM & ChaCha20P2P architecture means no upload quota, no storage cap. Transfer multi-gigabyte engineering files or large DICOM batches without workarounds.
Unlimited file sizesA single static Go binary. Runs on Linux, Windows, and macOS with identical behaviour and under 30 MB RAM at idle. No runtime dependencies.
Linux • Windows • macOSManaged infra-server handles ICE negotiation for NAT traversal. Only handshake metadata touches the relay — file data travels peer-to-peer.
ICE / TURN • NAT traversalEvery transfer produces a signed receipt: sender, receiver, file hash, byte count, and timestamp. Logs are immutable and exportable for compliance.
Signed receipts • exportableFull REST API for scheduling transfers, querying status, rotating keys, and provisioning stations. Integrates with any CI/CD pipeline or ETL workflow.
REST API • webhook eventsEnrol, revoke, and monitor all stations from a single dashboard. Set transfer policies, review health metrics, and manage certificates centrally.
Centralised managementSelect per transfer group. All four modes are available at every licence tier.
Authenticated but unencrypted. Use for trusted internal networks where payload confidentiality is handled at the transport layer.
Ed25519 signatures on every payload. Receiver verifies origin and integrity without a shared key. No encryption overhead.
AES-256-GCM or ChaCha20-Poly1305 with an ephemeral session key. Where identity verification is handled out-of-band.
Full zero-trust: Ed25519-authenticated identity plus payload encryption. The recommended mode for regulated data and external partners.
PeerAegis MFT integrates with existing workflows without replacing them wholesale.
Expose a local SFTP endpoint on any station. Existing scripts, cron jobs, and orchestration tools connect without changes. Your operations team sees familiar commands.
Audit logs, signed receipts, certificate lifecycle management, and RBAC are standard features. Covers the technical controls for GDPR, HIPAA, SOC 2, and ISO 27001.
Schedule recurring transfers via REST API or cron integration. Receive webhook events on completion, failure, or retry. Build pipelines that fit your existing orchestration layer.
The daemon is a single static binary with no runtime dependencies. Run in air-gapped environments by pointing to your own on-premises signaling server — no internet required.
We provision your environment. You download the daemon, enrol two stations, and transfer your first file — within one business day.