Encrypted on every packet
AES-256-GCM with fresh keys for every session. Keys are exchanged inside SSH or the server’s TLS connection.
Security
Safe by design. Quiet by default.
What Farwing does to keep your data safe, and what it never does.
Every file checked
BLAKE3 over the whole file, as it lands. A file that does not match is sent again. It keeps a temporary name until it passes.
No call home
Farwing sends nothing to us. Farwing Server contacts license.farwing.io only when an admin clicks Start trial. The firewall check uses an outside test service only when an admin presses the button, and says which one.
License works offline
The license is a signed file, bound to your server’s install ID. The server checks it locally, with no license server to reach.
Your server, your data
Farwing Server runs on your hardware or your cloud account. We never see your files, users or keys.
Signed releases
Every release is signed and has published SHA-256 checksums. See the download page.
Report a security problem
Email us. We reply within 2 working days and keep you posted until it is fixed.
- security@farwing.io
- Response
- Within 2 working days