Kutrion Transfer app

Kutrion Transfer is a native desktop file-transfer client. Its connections and credentials come from your Kutrion account, and the file operations run through the broker described in Managed file transfer. The credential for a remote is decrypted in memory on the server for an authorized action and is never given to the machine you are sitting at.

The trade-off is stated plainly: for a transfer between your laptop and a remote, the bytes cross the Kutrion server, so it is slower than a client that connects directly. What you get in return is that no credential reaches the laptop and each action is on the audit record.

Availability

Available from Downloads for macOS, Windows and Linux. The builds are unsigned, so you allow them past your operating system on first launch; the Downloads card carries the steps.

Set up

1. Install the app from Downloads.
2. Confirm the server address on the sign-in screen. The screen shows the server and the app version before you type a credential.
3. Sign in with your email and password, or use Sign in with Kutrion to borrow the sign-in held by the Kutrion Hub. If the Hub is not running or not signed in, the app says so and you sign in directly.
4. Your session token is sealed with the operating-system keychain. Where no keychain is available the token is held in memory for that run only, and the app tells you at startup.

What it can reach

One pane can be your local disk and the other any connection in your account: SFTP, FTP, FTPS, WebDAV, S3-compatible storage, Azure Blob and OpenStack Swift, plus cloud accounts where your administrator has configured them. See Managed file transfer for the protocol table and the egress guard.

Not every verb exists on every protocol. When you open the menu for a file, an action a protocol cannot do is shown with the reason, and an action the app does not drive yet is labelled as not yet available, rather than being left out.

Main tasks

Copy and move

Drag between panes, or use the menu. A plain drop copies; a move is Command on macOS and Shift on Windows and Linux. Option on macOS or Ctrl elsewhere says copy explicitly. The status bar names the outcome before you release. Dragging a file out of a remote pane to your desktop is not supported, because a remote file’s bytes are not on your disk.

Queue a server job

Choose Queue as server job to hand a transfer to the server so it keeps running if you close the lid. The Jobs tab lists them. A copy between two remotes runs server-side in either case.

Compare and sync

Compare two folders and review the plan before anything is written; the plan and the apply are the same server computation, and a dry run writes nothing.

Schedules, watchers and templates

The Automation panel manages recurring schedules, folder watchers and parameterised templates. The server runs them, not your laptop, so they do not need the app open. See the schedule and watcher sections of Managed file transfer.

Edit a remote file

Open a remote file in a local editor from the menu. The app tracks the local copy and will not let you dismiss or quit while edits are unsaved to the remote, so you cannot mistake a change on your laptop for one on the host.

Switch from another client

Import saved sites from FileZilla, Cyberduck, WinSCP, PuTTY, mRemoteNG, MobaXterm, Termius or an OpenSSH config. A connection is only created when the import carries both a username and a password. Several of these sources never contain a password, so those rows are skipped as “no credential” and you add the credential afterwards. A preview shows what will be created, updated or skipped before you commit.

Share a file by link

Vault drop creates a time-limited, view-limited link to a file. The longest expiry the server allows is 7 days.

First-use host keys

On first connection to an SFTP host the app shows the host key for confirmation, under the same pinning rules as Connecting to hosts.

Recordings and AI

Transfers are audited. Terminal recordings are a separate product surface: they are not private in either vault mode and their digests are sealed into the audit chain; see Session recording. Any cloud AI is opt-in and off by default.

Where to go next

• Managed file transfer - protocols, jobs, schedules, DLP and bandwidth policy.
• Kutrion Hub - one sign-in across the desktop apps.