The Arlington Economic Development (AED) interviewed CEO Ian Garrett to discuss the company’s growth and the advantages Arlington, VA offers to technology startups. In it, Ian discusses how Phalanx works with organizations to reduce data breach risk, how the company is growing, the benefits of being headquartered in Arlington, and more.
An excerpt from the interview:
Adam: Can you tell us more about Phalanx and how you work with organizations to reduce their data breach risks?
Ian: We founded Phalanx in response to one of the major issues in cybersecurity during the shift towards remote and hybrid work, which was the spike in data breaches that resulted from the antiquated approach of perimeter-based security. The definition of a cyber perimeter is increasingly unclear with remote workers, SaaS application integrations, and external vendors/services accessing assets. We found that leaders had no visibility or security of data outside of their databases, and that existing solutions to securely transfer data was highly cumbersome. The best way to ensure data is protected is by taking a data-centric approach to security. Ultimately, data should always have protection and tracking as it travels in and out of an organization. To provide both security and visibility in a way that worked alongside businesses we created MUZE.
Phalanx MUZE provides data analytics, tracking, and visibility over files and unstructured data, which is currently difficult to track but provides significant cyber risk to an organization. We also leverage automation to individually encrypt at the file level without burdening users or requiring classification, policies, or security decisions. One major challenge CISOs and business owners often face is a lack of personnel, so we knew our platform needed to not only be effective, but it had to work without needing additional hires.
The platform consists of an endpoint and web application. The endpoint application and its integrations (Outlook/Gmail, OneDrive/SharePoint/Google Drive, MS Teams) work in the background to automatically encrypt data at the file level and enable secure, trackable sharing across each of those environments. This automated file-level security allows users to work securely without hindering productivity, doesn’t require users to learn new behaviors, and doesn’t require them to make security decisions. The endpoint application gathers meta-data and sends it to the web application where leaders can view risk and understand all aspects of how their unstructured data is accessed and shared across the organization, regardless of location.
Transferring files securely is crucial for any business handling sensitive information. While SFTP (Secure File Transfer Protocol) has long been a trusted solution for encrypted file transfers, it can be cumbersome, especially for users without technical expertise. Thankfully, there are several modern alternatives to SFTP that offer strong security, improved usability, and additional features that make managing file transfers easier for businesses of all sizes. We’ll cover three alternatives to SFTP: Secure Email Gateways, Managed File Transfer (MFT) solutions, and Cloud Storage Services with encryption. We’ll also introduce SendTurtle, a simple yet secure platform designed to make file transfers seamless and safe.
3 Alternatives to SFTP + 1 Bonus
Problems with SFTP and Why People Still Use It
SFTP, or Secure File Transfer Protocol, has been around since the late 1990s and is still widely used for transferring files over secure, encrypted channels. Despite its longevity, SFTP comes with significant challenges that make it less user-friendly than modern alternatives. Yet, many businesses continue to rely on it, especially for legacy systems or highly technical environments. Let’s explore the issues with SFTP and why it remains relevant despite its shortcomings.
Problems with SFTP
Complex Setup: SFTP requires technical knowledge for initial configuration, including setting up SSH keys, user permissions, and server configurations. This can be a daunting task for businesses without dedicated IT teams.
User Unfriendliness: The protocol isn’t designed with non-technical users in mind. Interacting with SFTP often requires specialized software or command-line interfaces, making it difficult for non-technical employees to use effectively.
Manual Process: For many businesses, SFTP lacks automation features. Tasks such as uploading and downloading files, managing permissions, and monitoring transfers often require manual intervention, which is time-consuming.
Limited File Management: SFTP focuses purely on file transfer, offering little in the way of file management features, such as expiration dates, file tracking, or recipient notifications, which are now common in modern file transfer solutions.
No Expiration or Revocation: Once a file is transferred via SFTP, there is no native mechanism for revoking access or setting expiration dates on the data. This can lead to sensitive information lingering longer than necessary.
Why People Still Use It
Proven Security: SFTP uses SSH for encryption, which is a well-established and trusted security protocol. Many businesses stick with SFTP because of its strong encryption capabilities and proven track record of keeping data secure during transit.
Compliance Requirements: Some industries, especially those with strict compliance needs (like healthcare and finance), continue using SFTP because it’s a well-understood protocol that meets the security standards required by regulatory bodies such as HIPAA or GDPR.
Legacy Systems: Many businesses with legacy IT systems still rely on SFTP because it integrates easily with older systems that may not support more modern alternatives. Switching away from SFTP might require costly upgrades or migrations.
Widespread Adoption: SFTP is a standard protocol supported by many file transfer applications and IT infrastructures. Businesses that already have SFTP integrated into their processes may not feel an immediate need to change, especially if the system is working for them.
Despite its challenges, SFTP remains a solid choice for businesses that prioritize security and have the technical capabilities to manage it. However, modern alternatives offer more user-friendly, automated, and flexible approaches to secure file transfers.
Alternative 1: Secure Email Gateways
Secure Email Gateways (SEGs) are a popular choice for businesses looking for a straightforward way to transfer files securely via email. These gateways provide encryption and advanced security features to ensure that sensitive files are transmitted without risk. SEGs can be integrated into existing email systems, making them a convenient option for organizations that need to quickly share confidential documents without adding significant overhead.
Pros
Ease of use: Since SEGs work within familiar email environments, there’s little learning curve for employees.
Encryption: Most SEGs offer end-to-end encryption, ensuring files remain secure from sender to recipient.
Data Loss Prevention (DLP): SEGs can prevent accidental or malicious leaks of sensitive data by blocking unauthorized file sharing or external access.
Cons
Size limitations: Many email systems and SEGs impose limits on file size, which can be restrictive for businesses transferring large files.
Email vulnerabilities: Email remains a common target for phishing and malware, and while SEGs protect attachments, email-based threats can still pose risks.
Compliance challenges: Depending on the industry, email gateways may not provide the level of compliance required for stringent regulations.
Alternative 2: Managed File Transfer (MFT) Solutions
Managed File Transfer (MFT) solutions are designed for businesses that require secure, large-scale file transfers, along with automated workflows and regulatory compliance. MFT platforms are robust, often featuring detailed tracking, reporting, and auditing capabilities, which are essential for organizations handling sensitive data such as financial institutions and healthcare providers. These solutions usually support encryption, file expiration, and compliance with data security standards like HIPAA and GDPR.
Pros
Comprehensive security: MFT solutions provide multiple encryption layers, ensuring the security of data in transit and at rest.
Automation: MFT solutions can automate repetitive file transfers, making them ideal for businesses with ongoing file-sharing needs.
Compliance: Built-in compliance features help organizations meet industry regulations for data protection and secure file sharing.
Cons
Complexity: MFT platforms can be overly complicated for small businesses or teams without dedicated IT staff.
Cost: Many MFT solutions are enterprise-grade and come with a significant price tag, making them less accessible to smaller organizations.
Setup: Initial setup and configuration of an MFT system can require considerable time and expertise.
Alternative 3: Cloud Storage Services with Encryption
Cloud storage services like Google Drive, Dropbox, and OneDrive have become widely adopted for file sharing, particularly for remote teams. However, many of these platforms now offer encryption options to ensure files are secure during transfers. Business versions of cloud services provide features such as file access control, encryption, and audit logs, making them suitable for businesses looking to share files securely without investing in complex infrastructure.
Pros
Convenience: Cloud storage services are highly accessible and easy to use for both technical and non-technical users.
File sharing control: Users can control who has access to files and for how long, adding an additional layer of security.
Collaboration tools: These platforms allow real-time collaboration, which can be beneficial for team-based workflows.
Cons
Transparency: Some cloud providers do not offer full transparency into their encryption methods, raising concerns about third-party access.
Vendor lock-in: Once a business chooses a cloud provider, it can be difficult to switch due to data migration challenges.
Limited file expiration: Cloud services do not always allow users to specify when shared files expire, which can be problematic for businesses wanting tighter control over data.
Bonus: Introducing SendTurtle: A Simple and Secure File Transfer Solution
If you’re looking for a secure alternative that combines the simplicity of cloud services with the encryption benefits of MFT and SEGs, SendTurtle might be the ideal solution. SendTurtle is designed specifically for businesses that need a fast, secure way to transfer sensitive files without the complexity of traditional MFT platforms.
With end-to-end encryption, you can ensure that only the intended recipient can access your files. One of SendTurtle’s key features is its file expiration settings, which allow you to control how long a file is available after being sent. This ensures sensitive information doesn’t remain accessible beyond its necessary use, adding an extra layer of security.
Pros
Ease of use: SendTurtle’s simple interface makes it easy for non-technical users to securely send files with minimal effort.
File expiration: Users can set expiration dates on files, preventing them from lingering in digital limbo.
Data Access Tracking and Auditing: SendTurtle lets businesses know who accesses the data as well as when and if they downloaded it.
Robust Link Management: Even if you forgot a security setting when a link is sent, you can easily change it afterwards without sending a new link.
End-to-end encryption: Ensures that sensitive files remain secure from the moment they are sent until they are received.
Cons
Limited automation: While SendTurtle is ideal for ad-hoc transfers, it does not offer the same level of automation as full-fledged MFT solutions.
File size limits: Depending on your plan, there may be file size restrictions for transfers.
While SFTP remains a tried-and-true method for securely transferring files, businesses now have several modern alternatives. Secure email gateways, managed file transfer solutions, and cloud storage services with encryption all offer different advantages depending on your needs.
For those seeking an easy-to-use yet highly secure solution, SendTurtle provides a modern, lightweight approach to secure file transfers, making it an excellent option for businesses that need simplicity without sacrificing security.
Learn About Secure File Transfers and More With Phalanx SendTurtle
Businesses of all sizes handle sensitive information daily, making secure file transfers crucial for maintaining security. Whether it’s financial records, personal client information, or confidential business plans, safeguarding this data during transfer is essential. Protecting this data not only keeps it safe but also builds trust with clients and partners. Secure file transfers involve using
Businesses of all sizes handle sensitive information daily, making secure file transfers crucial for maintaining security. Whether it’s financial records, personal client information, or confidential business plans, safeguarding this data during transfer is essential. Protecting this data not only keeps it safe but also builds trust with clients and partners. Secure file transfers involve using
Scroll to Top
Specifies total amount of data that can be shared per secure links.
Gives you direct access to support through phone or video calls, for immediate assistance.
Offers faster email support, ensuring your queries are prioritized.
Provides assistance and answers your questions via email.
Lets you brand the file send page with your company’s logo and colors, providing a professional and secure way to send files.
Extends protection to more complex or specialized document types, ensuring all your data is secure.
Ensures common types of office documents, like Word and Excel files, are protected and managed securely.
The ability to set when your links will expire.
Allows you to see a record of who’s looked at your link, what time they looked at it, and if they downloaded the file.
Number of File Receives
How many file links you can generate to send files.
Lets you safely preview PDF files without the need to download them, adding an extra layer of security.
Provides a secure way for people outside your company to send you files, ensuring they’re protected during transfer.
Allows you to share files securely through links, ensuring that only people with the link can access them with many ways to restrict access.