FilePilot Enterprise Vault Reviews & Product Details

Team credential vault for secure server access — no shared passwords, full audit trail. FilePilot Enterprise Vault is a free, open-source, self-hosted credential server that lets teams share access to FTP, SFTP, FTPS, SCP, S3, and WebDAV servers without ever passing around raw passwords or keys. Instead of emailing credentials, admins provision connection profiles once and issue each teammate a scoped, revocable access token. Every credential is protected with two-tier AES-256-GCM envelope encryption, organized into isolated Vault Groups — each with its own encryption key, IP allowlist, and choice of KMS provider (AWS, Azure, GCP, or HashiCorp Vault). Role-based access control (Admin, Manager, Operator, Auditor) with 20+ granular permissions ensures people only touch what they're supposed to, enforced server-side on every API call. Built for compliance-sensitive teams, the Vault keeps a tamper-evident, hash-chained audit log of every action, streams events to your SIEM via HMAC-signed webhooks, and supports legal/preservation holds to freeze data for regulatory review. A built-in compliance dashboard summarizes encryption, access, audit, and session posture in one view — ready for SOC 2 or HIPAA audits. Setup takes minutes via a browser-based wizard, with support for SQLite, PostgreSQL, or MySQL. Real-time WebSocket sync means token revocations, file reverts, and hold status changes take effect instantly across connected clients. Deploy it anywhere — Docker, on-prem, or your own cloud — with no per-seat cost, no telemetry, and full MIT-licensed source. Best for: Engineering, DevOps, and IT teams who need centralized, auditable, role-based access to shared infrastructure credentials without relying on password managers or spreadsheets. Key features: Central credential vault with encrypted, per-group storage Role-based access control with 20+ fine-grained permissions Scoped, revocable, expiring access tokens Tamper-evident hash-chain audit logging + SIEM webhook integration Legal hold / write-freeze for compliance investigations File version history with one-click remote revert Multi-KMS support (AWS, Azure, GCP, HashiCorp Vault) Self-hosted, MIT licensed, zero telemetry