Sharing and requests
Bridge. White-label, guest MFA, expiry, watermark, and files in your cloud.
Compare
MOVEit alternativefor BYOS sharing after 2023
Progress MOVEit is widely deployed managed file transfer. Trustholm Bridge is branded file exchange with customer-owned storage.
Choose Bridge when you want partner sharing without a central MOVEit datastore holding the files. Keep MOVEit for automated, protocol-centric MFT you still run.
Files in your cloud · White-label portal · SIEM audit
How to read this page
Progress MOVEit is widely deployed for good operational reasons. A MOVEit alternative query after 2023 often means you want partner sharing without a central datastore holding the files.
Bridge answers that for branded share, file-request, and workspaces. If the painful module is Ad Hoc sharing used by legal, vendors, and customer success, that is the slice we will take seriously in a pilot. Keep MOVEit Automation for scheduled partner jobs you still run.
CVE-2023-34362 is category evidence
The SQL injection zero-day exploited by Cl0p in 2023 hit thousands of organisations and put MOVEit on every board cyber pack.
The structural point: an internet-facing transfer engine that also holds the files is a high-value target. Bridge keeps the internet-facing control plane and leaves the blob store in your account. Partners still get a branded portal. Files stay in storage you already operate. Audit lands in Sentinel or Splunk.
A sane coexistence plan
Keep MOVEit for partner SFTP and scheduled jobs. Move human file-request and branded send to Bridge. Point legal, third-party risk, and customer success at the new portal. Drain MOVEit Ad Hoc if that is the module that worries you.
You recreate folders as shares and requests. That is hygiene: every motion you move is one you still need. Partners see your brand. Files stay in the storage account your architecture board already accepts.
What you move to Bridge
Move Ad Hoc sharing, file-request, and branded send. Legal, vendors, and customer success get a portal that looks like you. Files land in your Blob, GCS, or S3. Audit streams to the SIEM you already staff.
Staff sign in with Entra, Google Workspace, or SAML. Guests prove identity with work login, a one-time email code, or passkey / TOTP. Every share can expire, revoke, watermark, and export. Malware quarantine can sit on MetaDefender, a customer webhook, or Defender Event Grid ingest.
Onboarding is storage, IdP, brand, scan engine, and SIEM. Walk invite, upload, download, revoke, and export before you expand the guest list.
Keep Transfer plus Automation for the scheduled protocol jobs you still run.
Side by side
Best for Trustholm
Security-led buyers who want the HTTPS sharing and file-request motion on BYOS storage, with Entra or Google identity and export into Sentinel or Splunk.
Best for incumbent
Operations teams that live in MOVEit automation, Transfer/Ad Hoc modules at scale, and partner SFTP communities they cannot pause.
| Capability | Trustholm | Progress MOVEit |
|---|---|---|
| Central transfer datastore | Customer BYOS holds bytes | MOVEit Transfer is the engine and store many estates standardise on |
| Ad hoc / branded sharing | Core product, white-label hostname | Available alongside Transfer automation |
| SFTP community | Keep SFTP on MOVEit; Bridge covers the portal | Core strength |
| Automation and scheduling | Human share and file-request | Deep MFT automation |
| Audit / SIEM | Hash-chained events to customer SIEM | Mature MFT logging and compliance reporting |
| White-label customer hostname | Part of the offer | Depends on module and deployment |
What "alternative" means here
Alternative to MOVEit as a file-holding share portal. Keep MOVEit for the protocol jobs that remain.
Files in your cloud
Bridge. Bytes stay in Blob, GCS, or S3 you already operate.
Audit narrative
Bridge streams to your SIEM. MOVEit keeps its own operational history for the jobs that remain.
What you get with Bridge
In the product
- BYOS share/file-request as the ad hoc alternative
- IdP federation and guest MFA
- Malware quarantine and local DLP
- SIEM replay for the SOC that asked after 2023
What you can show
- Partner files at rest in your cloud, not on a central MOVEit datastore
- A branded portal legal, vendors, and customer success can finish
- Hash-chained audit in Sentinel or Splunk
- A sharing slice you can move without pausing SFTP communities
Ready to move Ad Hoc sharing onto storage you own?
Request Bridge access. Bring one sharing motion and the SIEM owner. Partners land on your hostname. Files stay in your cloud.
Frequently asked questions
- What sharing motions does Bridge take from MOVEit?
The human sharing slice when you want BYOS. Keep Transfer plus Automation for the scheduled protocol jobs you still run.
- Are you saying MOVEit is unsafe?
A widely exploited 2023 defect showed the cost of central custody on an internet-facing engine. Bridge changes the model: files at rest stay in your cloud.
- Can healthcare still use Bridge?
Yes, as a sharing tool with BYOS and audit. Confirm BAA and assessor process during onboarding.
- Do you support MOVEit-style tasks and schedules?
Bridge is branded share, file-request, and workspaces. Keep MOVEit Automation for scheduled partner jobs.
- Will partners notice the change?
They will see your brand and a different upload UX. They should not need an SFTP client for the motions you move.
- What identity works for internal users?
Entra, Google Workspace, or SAML. That is usually easier than another MOVEit local user database for staff.
- Can audit go to Splunk?
Yes, Splunk HEC is a shipped SIEM adapter, alongside Sentinel, webhook, and Pub/Sub.
- How do we start?
Request Bridge access and list MOVEit modules in use. We will mark portal versus protocol before anyone talks cutover.