SecureBridge: SSH, SFTP and TLS Components for Delphi With No OpenSSL DLLs to Ship
SecureBridge is a Devart component library that adds SSH, SFTP, FTPS, TLS, HTTPS, WebSocket and SignalR to applications built with Delphi, C++Builder and Lazarus. It costs $199.95 at checkout for one developer on the Professional edition, or $99.95 for the client-only, Windows-only Standard edition.
You reach for it when your Delphi application has to fetch a file from an SFTP server, reach a database through an SSH tunnel or talk TLS 1.3, and you would rather not deploy external libraries alongside your EXE. You place a few components on a form, set the server and login, and the secure channel is part of your application.
Quick facts
- Version: 12.1.0, released October 9, 2026
- Developer: Devart
- IDEs: Delphi and C++Builder 6 to 13 Florence, RAD Studio, Lazarus 4.8 with Free Pascal 3.2.2 (Lazarus needs the source code edition)
- Target platforms: Windows 32-bit, 64-bit and Arm64EC in every edition; macOS, Linux, iOS and Android in Professional
- Protocols: SSH2, SFTP 1 to 6, FTP/FTPS, TLS 1.0 to 1.3, SSL 3.0, HTTP/HTTPS, WebSocket, SignalR, SMTP, CMS
- Price: $199.95 Professional, single developer, with one year of updates and support; next-year renewal $99.95
- Trial: 60 days, free, with a free Devart account
- Guarantee: 60-day money-back guarantee
What we checked: version 12.1.0 and the 32.35 MB size of the RAD Studio 13 build on Devart's download page, the revision history, the edition matrix, $199.95 and a $99.95 renewal on the order page on November 6, 2026. We did not install the components or run them against a server.
Before you buy
Pick the edition by what you build, not by the price. Standard has the clients only and targets Windows only. An SSH or SFTP server, or a macOS, Linux, iOS or Android target, means Professional. Lazarus and Free Pascal support comes only with Professional with Source Code at $299.95.
The order page opens on Professional, so switch the edition there if Standard is enough. The purchase includes a year of updates, the license for your version stays yours afterward, and the cart has automatic renewal switched on by default. You can turn that off.
Download Free TrialBuy Now
Overview
SecureBridge is built natively in Delphi. Its components encrypt any TCP traffic over SSH or TLS, and they sit between your application and the network without adding outside DLLs. Devart lists no external modules as a requirement, which is the main reason to choose it over a mix of free libraries.
It also works with Devart's database components. MyDAC, PgDAC and UniDAC can route their connections through SecureBridge, so a Delphi client can reach a MySQL or PostgreSQL server over SSH with no separate tunnel program. Devart keeps pace with the IDE: version 12.0 in April 2026 added RAD Studio 13 Florence Release 1 and the Arm64EC target, and 12.1.0 in October 2026 added Release 2 and Lazarus 4.8.
Features
SSH client and server inside your application
SecureBridge implements SSH2 as both client and server. Its SSH server works with clients such as OpenSSH and PuTTY, and its client works with SSH2 servers including OpenSSH. Authentication is by password or public key, you can run remote commands, and several logical connections can share one SSH tunnel. Any TCP protocol, such as SMTP, POP or IMAP, can pass through.
An older RAD Studio XE2 screen: the SSH client demo form with port forwarding fields, the certificate storage editor, and the SecureBridge components in the Tool Palette.
SFTP and FTPS file transfer
SecureBridge supports SFTP protocol versions 1 to 6 with client and server components, plus FTP and FTPS without external units. Version 12.1.0 added resume mode for SFTP uploads and fixed SSH key re-exchange problems during large file transfers, both of which matter when you move big files over slow links.
TLS 1.3, certificates and keys
SecureBridge handles TLS 1.0 to 1.3 with its own code, keeps SSL 3.0 for old systems, and fully validates server certificate chains, including authority and CRL checks. Keys, certificates and users can live in a file, the registry, memory or the Windows CryptoAPI store. It supports AES, Blowfish, Cast128 and TripleDES ciphers, RSA, DSA and elliptic curve keys, and SHA-2 hashing.
HTTPS, REST, WebSocket and SignalR
SecureBridge goes beyond file transfer. TScHttpWebRequest makes REST calls, TScHttpServer serves HTTP and HTTPS, and there are components for WebSocket clients and SignalR hubs. The Professional edition lists TScRestClient and TScOAuth2, so a Delphi application can log in to an OAuth service without another library.
Signed and encrypted messages with CMS
SecureBridge's TScCMSProcessor signs, verifies, encrypts and decrypts any content in CMS/PKCS #7 format. That covers jobs like signing a document your server will verify, using the same library as the transport.
Benefits
- One less file to deploy. No OpenSSL build to ship, track and patch next to your EXE.
- A fix path for old code. Delphi 6 and 7 projects can still get TLS 1.3 and SFTP.
- One vendor for security and data access. Useful if you already run UniDAC, MyDAC or PgDAC.
- Royalty-free distribution. It is licensed per developer, team or site, not per end user.
Real-World Uses
- A Delphi desktop application reaches a MySQL server that accepts only SSH, using MyDAC over a SecureBridge tunnel.
- A nightly service written in Delphi uploads invoices to a bank's SFTP server and resumes if the line drops.
- A vendor adds an SFTP server to its own Windows product so customers can drop files without installing anything else.
- A long-lived Delphi 7 application is updated to talk to a modern HTTPS REST API that rejects old TLS versions.
Who It's For, and Who Should Skip It
It fits commercial Delphi and C++Builder developers who need SSH or SFTP, want no external DLLs, and are happy to pay for a product with a support desk.
Skip it if you need only plain HTTPS calls in a current Delphi: the IDE's own HTTP client classes already do that. Skip it too if you write in anything other than Delphi, C++Builder or Lazarus, since there is no .NET, Java or Python version. Hobby Lazarus users should note that Lazarus support starts at the $299.95 edition.
Usage Guide
- Create a free Devart account, download the build for your IDE from the download page, and run the installer. There is a separate build for each RAD Studio version.
- Open your IDE. The SecureBridge group appears in the Tool Palette.
- Drop a key storage component (TScFileStorage, for example) and a TScSSHClient on a form, then set the host, user and authentication.
- Add the component for the job: TScSFTPClient for files, TScSSHChannel for a tunnel, TScSSLClient for TLS.
- Open the demos installed with the product to see working forms for the SSH client, the SFTP client and the servers.
- When you buy, replace the trial with the licensed build from your Devart account, rebuild, and ship your EXE with no extra security files.
Where it falls short
You will have to write code. These are non-visual components, not an application. Tuning cipher suites for a picky server means reading the documentation or asking support.
Some servers still need troubleshooting. A forum user reported a failure alert when connecting to HiDrive storage over TLS 1.3 in October 2022, and memory use with large HTTP responses has come up too (see below). Devart's revision history shows steady fixes in these areas, so test your own servers during the trial.
Some requests remain on the wish list. Users on Devart's idea board have asked for Kerberos (8 votes) and OpenPGP (4 votes). If you need either, ask Devart first.
What Users Say
SecureBridge is a small niche product, so there are few public reviews. The ratings that exist are high, and the sharper comments come from Devart's own support forum.
Review sites
G2 shows 4.9 out of 5 from 12 reviews. Reviewers praise the fit with Devart's database components, and one wrote:
"I really like how well the product integrates into their UniDAC data acces component set. I was able to integrate it into my app in only a few minutes."
Others on G2 single out Devart's support and fair pricing, and one calls it the best way to add SSL access to MySQL from Delphi. ComponentSource, a reseller, shows 4.5 out of 5 from 6 reviews, none negative.
Download3K gives a more mixed picture. Its editor, Pete Daniel, wrote "Strong SSH, SFTP and TLS support" and calls it "a useful tool for C++ and Delphi programmers who will find the components useful", while the page's user rating stands at 1.5 out of 5 from just 4 votes.
Problems reported on Devart's forum
User Raedel, October 19, 2022, on connecting to HiDrive: "They need TLS 1.3, but i get erverythime error "The other side has send a failure alert: [47]""
User ualms, August 2, 2022, on many HTTP calls: "If i call httpwebrequest.GetResponse the used memory go up. The Call httpwebresponse.free do not release the memory. This is a problem, because i have to call up to 10000 requests." Devart staff asked the user to release the request object too, not just the response.
An earlier post in that thread saw up to 1.3 GB of RAM used during one web request. Devart's reply is worth knowing: ReadAsString allocates the data several times, and ReadToStream with a file stream avoids it.
What buyers ask for most
On Devart's idea board, the top requests were a CryptPlugin for RealThinClient (50 votes), SMTP and POP3 support (21 votes), and SFTP server events for finished file transfers (12 votes). SMTP has since arrived as TScSMTPClient, so the board is a rough guide to what users want rather than a list of gaps.
The recurring themes: people like how quickly it fits into an existing Delphi project and how Devart responds to support questions. Complaints are about specific servers and memory use under heavy loads, not about the product as a whole.
Comparisons
SecureBridge vs Indy
Indy is free, open source and familiar to Delphi developers, and it remains the sensible choice for plain sockets. It has no SSH or SFTP of its own, and its TLS support depends on OpenSSL libraries that you ship. SecureBridge costs money and removes both limits. They can also work together, since SecureBridge supports Indy.
Editions and Pricing
| Edition | Price, single developer | Clients | Servers | Targets |
|---|
| Standard | $99.95 | SSH, SFTP, TLS, FTP, SMTP | No | Windows |
| Professional | $199.95 | SSH, SFTP, TLS, FTP, SMTP | SSH, SFTP, TLS, HTTP, TCP | Windows, macOS, Linux, iOS, Android |
| Professional with Source Code | $299.95 | Same as Professional | Same as Professional | Same, plus Lazarus and Free Pascal |
Team and Site licenses are also available. Each edition includes a year of updates, and paying for two or three years up front costs less per year. Devart adds 20% to the renewal price if you renew 3 or more months after your updates end, and 60% after 12 months.
FAQs
Does SecureBridge need OpenSSL DLLs?
SecureBridge does not need OpenSSL or any other external module. Its TLS, SSH and SFTP code is compiled into your application, so you deploy only your EXE.
What happens to SecureBridge when the update year ends?
SecureBridge keeps working. Devart gives you a perpetual license for the version available when your subscription ends. Renewing, at $99.95 for Professional, buys newer versions and continued support.
Do my customers need a SecureBridge license?
Your customers do not. SecureBridge is licensed royalty-free per developer, per team or per site, so you can ship applications built with it to any number of end users.
Which Delphi versions does SecureBridge support?
SecureBridge supports Delphi and C++Builder from version 6 up to 13 Florence, including Community Edition. Some versions need a specific update, such as Release 2 for RAD Studio 13 Florence.
Can SecureBridge tunnel UniDAC or MyDAC connections?
SecureBridge can tunnel Devart data access components over SSH. Devart documents this for MyDAC, PgDAC and UniDAC, and the G2 reviews mention it as a strong point.
Can I get a refund on SecureBridge?
SecureBridge comes with a 60-day money-back guarantee on the order page, and Devart's ordering FAQ says refunds follow an attempt by support to solve the problem, so contact them first.
System Requirements
- Delphi or C++Builder 6 to 13 Florence, or RAD Studio, with the update Devart lists for your version
- Lazarus 4.8 and Free Pascal 3.2.2 on Windows, macOS or Linux, with Professional with Source Code
- Compatible with OpenSSH 3.8 and PuTTY
- No external libraries at run time
Conclusion
SecureBridge is worth it for a Delphi team that needs SSH or SFTP in a shipped product. The one reason to buy is a native library with no DLLs that covers client, server and tunnel in one install, back to Delphi 6.
The main reason not to buy is that you need only HTTPS, or only a client on Windows. In the first case your IDE may already be enough, and in the second the $99.95 Standard edition is the better deal than the $199.95 Professional that the order page selects.
Download Free TrialBuy Now