Encrypted on every packet
AES-256-GCM with fresh keys for every session. Keys are exchanged inside SSH or the server’s TLS connection.
Security
Safe by design. Quiet by default.
What Farwing does to keep your data safe, and what it never does.
Every file checked
BLAKE3 over the whole file, as it lands. A file that does not match is sent again. It keeps a temporary name until it passes.
No call home
Farwing sends nothing to us. The firewall check in Farwing Server uses an outside test service only when an admin presses the button, and says which one.
Licence works offline
The licence is a signed file. The server checks it locally. It never contacts a licence server.
Your server, your data
Farwing Server runs on your hardware or your cloud account. We never see your files, users or keys.
Signed releases
Every release is signed and has published SHA-256 checksums. See the download page.
Report a security problem
Email us. We reply within 2 working days and keep you posted until it is fixed.
- security@farwing.io
- PGP key
- To be published
- Response
- Within 2 working days