Deaddrop
Deaddrop is a web based secure file transfer appliance. Deaddrop is used for transferring files between single persons or groups of persons as easily as possible. It is designed from the ground up with security in mind. Operating system, sub systems, web server and web applications are all hardened. The Usability and awesome security features were key design properties built-in from the beginning when we developed Deaddrop.
Only by having an appliance one has the control over file imports/exports into an organization. The Deaddrop virtual appliance allows you to have a policy compliant way to transfer information, to have security controls in place that you configure and control.
Use cases include having Deaddrop
A controlled way to export sensitive files to third parties, e.g. contracts or reports, to get access control, secure transport and not least an audit trail with time stamped upload and download recepipts.
A printing company that needs to receive large files. Sensitive files better not be sent by traditional unencrypted FTP or mail.
An internal distribution mechanism, as a datalock, between different security zones, where only certain files are allowed to be transferred in certain directions.
As a file distribution mechanism for projects working with internal and external partners.
A chokepoint and controlpoint for importing files to an organization, for example patches and executables that is not covered by automatic patch solutions (e.g. WSUS).
A controlled way to export documents to members of the board, with full access control, secure transport and not least an audit trail with time stamped upload and download receipts.
A data washing machine, that is used to check that only allowed content is exported. And that information is checked before being forwarded.
Features
Security
- Hardened operating system with minimal and restricted install
- Files are virus scanned with multiple antivirus scanners
- No sideloading or mashup of data, or program code
- File up and downloads are protected by TLS
- Hardened SElinux policy enforcing all processes
- SElinux MCS isolation between users
Technical
- Support for multiple SMS gateway solutions
- Support for local modem for sending SMS
- Built for Internet standards: TLS, HTTP, SMTP, NTP
- Physical or virtual appliance
- REST API for integrations
- Active directory integration
- SAML support
Usability
- Drag and drop a file to a receiver
- As simple to send multiple files to many receivers as sending one file to one party
- Receiver get reminder notification if file is not downloaded for some time
- Easy to send very large (multi gigabyte) files
- Simple 3 click-to-send setup with reasonable defaults
- Sender notified when file is downloaded and expired
- Built-in, easy to find, documentation