Need files in your cloud
Bridge. White-label share, file-request, and workspaces on Blob, GCS, or S3.
Compare
GoAnywhere alternativefor branded sharing in your cloud
GoAnywhere is a protocol-rich managed file transfer platform owned by Fortra. Trustholm Bridge is white-label share, file-request, and workspaces with files in your cloud.
Choose Bridge when the job is a branded portal and you want customer file bytes in your own cloud. Keep GoAnywhere when you need a central MFT engine and trading-partner protocols.
Files in your cloud · White-label portal · SIEM audit
How to read this page
Fortra's GoAnywhere MFT is a serious product: automation, multiple file servers, compliance reporting, and optional Gateway to keep data out of the DMZ. It is also a central custody design.
A GoAnywhere alternative search often means you want a cleaner partner portal. Bridge is built for that. Keep protocols on GoAnywhere if that lane still earns its keep.
What you can defend with Bridge is architecture: Trustholm persists metadata and audit. File bytes at rest stay in your cloud.
Why CISOs ask after 2023
CVE-2023-0669 in GoAnywhere MFT was exploited widely in 2023. Fortra later shipped additional critical fixes, including an authentication-bypass issue addressed in the 7.4.1 line. Those are public facts about an internet-facing MFT surface. Progress MOVEit had a parallel 2023 story.
Bridge's answer is BYOS mint-only. Trustholm persists metadata and audit. File bytes at rest stay in your cloud. That removes a class of "steal the MFT datastore" outcomes.
If the painful bit is the HTTPS partner portal and the fact that files live on the appliance or SaaS MFT volume, Bridge is the path.
What you move to Bridge
Inventory ad hoc HTTPS shares and file-requests first. Move those user motions onto a branded portal with files in your Blob, GCS, or S3. Keep scheduled SFTP and AS2 on GoAnywhere if that lane still earns its keep.
Partners land on your hostname. Staff sign in with Entra, Google Workspace, or SAML. Guests prove identity with work login, a one-time email code, or passkey / TOTP. Every share can expire, revoke, and stream into Sentinel or Splunk.
Onboarding is storage, IdP, brand, scan engine, and SIEM. Budget a pilot business unit. Walk invite, upload, download, revoke, and export before you expand the guest list.
Pricing conversations should compare a focused exchange layer plus the MFT you keep, versus another year of expanding the central estate to cover sharing UX.
Side by side
Best for Trustholm
Enterprises, MSPs, and agencies that want branded share, file-request, and workspaces with BYOS, IdP federation, and SIEM, with files in storage they already operate.
Best for incumbent
Teams that need SFTP, FTPS, AS2, PeSIT, GoAnywhere Gateway in the DMZ, FileCatalyst-class acceleration, or a mature workflow automation catalogue on day one.
| Capability | Trustholm | Fortra GoAnywhere |
|---|---|---|
| Where file bytes rest | Customer Azure Blob, GCS, or S3 (mint-only) | Central MFT storage / folders on the GoAnywhere estate |
| SFTP / FTPS / AS2 | Keep your protocol lane; Bridge covers the portal | Core product |
| Branded HTTPS share and file-request | Core product, white-label hostname | Available as part of the MFT suite |
| Workforce identity | Entra, Google Workspace, SAML | Broad enterprise IAM options in the MFT admin model |
| SIEM-oriented audit | Hash chain plus Sentinel / Splunk / webhook / Pub/Sub | Central logs and compliance reporting inside GoAnywhere |
| Internet-facing admin / transfer surface | Control plane metadata; bytes stay in customer storage | MFT engine and admin portal are a known high-value target class |
Decision shortcuts
Pick the tool for the job. Many programmes run both.
Need branded HTTPS sharing
Bridge. Partners land on your hostname, with guest MFA and expiry you control.
Need protocols and a portal
Coexist. Protocols on GoAnywhere or another MFT. Branded share on Bridge.
What you get with Bridge
In the product
- BYOS share and file-request as the GoAnywhere HTTPS-sharing alternative
- White-label portal and guest MFA
- SIEM export designed for SOC review
- Workspaces with revision history
What you can show
- Files at rest in your Blob, GCS, or S3, not on the vendor MFT volume
- A partner portal that presents as your organisation
- Hash-chained audit in Sentinel, Splunk, webhook, or Pub/Sub
- A sharing slice you can move without a protocol cutover
Ready to move sharing onto storage you already operate?
Request Bridge access and bring the custody diagram. Partners land on your hostname. Files stay in your cloud.
Frequently asked questions
- What sharing motions does Bridge take from GoAnywhere?
Branded HTTPS sharing, file-request, and workspaces. Keep GoAnywhere for MFT protocols, Gateway, and workflow projects you still run.
- Did you build Bridge because of CVE-2023-0669?
The product invariant is no file-byte custody. The 2023 MFT incidents are why that invariant is easy to explain to a CISO.
- Can we run Bridge and GoAnywhere together?
Yes. That is the recommended path when SFTP or AS2 still matter.
- Does Bridge include an SFTP server?
Bridge covers branded share, file-request, and workspaces. Keep SFTP on GoAnywhere or another MFT tool if that lane still matters.
- Is GoAnywhere SaaS or on-prem?
Fortra offers multiple deployment models. Our comparison is about custody and job-to-be-done, not a single SKU.
- How do you move GoAnywhere sharing users?
We remake the sharing motions you still need, under your brand and storage.
- How do you handle compliance headlines GoAnywhere markets?
Your assessor maps Bridge architecture and audit to your programme. Use the trust hub for subprocessors and shared responsibility.
- How do we evaluate?
Request Bridge access, list the GoAnywhere features you actually use, and mark which are protocols versus portal sharing.