sgcIndy is a maintained, patched, modernised distribution of the Indy library, not a fork and not a replacement. Roughly 160 wrapped Indy components under the sgcId* prefix, with OpenSSL 1.1.x and 3.0.x bindings, TLS 1.3, SSH and SFTP clients, and opt-in server hardening on top.
What changes, what stays the same, and what is new. Narrated and captioned. Nothing downloads until you press play.
Indy, the library you already know, kept up to date and hardened.
Indy is the original Internet Direct library, dual-licensed and maintained by the Indy Pit Crew. sgcIndy keeps its component model and class names, then layers on the pieces the stock distribution does not ship. Every item below is documented on the sgcIndy vs Indy comparison.
Headers for the OpenSSL 1.1.x ABI and for the OpenSSL 3.x provider architecture, alongside the legacy 1.0.x API, so you can link against current libraries without patching the original SSL units. TIdSSLVersion gains sslvTLSv1_3, and the context probes the runtime through IsOpenSSL_TLSv1_3_Available before applying it. TLS 1.2 and 1.3 work through both the OpenSSL and the SChannel backends.
An SSH 2.0 client with password, public key and keyboard-interactive authentication, Execute() for remote commands, shell and PTY sessions, multi-channel support and local or remote port forwarding. Indy upstream ships no SSH component.
SFTP v3 over SSH, built on TIdSSHClient. Get and Put by path or stream, ListDirectory with full attributes, delete, rename, folder management, and OnSFTPProgress with a cancel flag. Indy upstream ships plain FTP and FTPS, not SFTP.
StrictVerify closes the fail-open certificate verification path. DisableCompression, DisableRenegotiation and ServerCipherPreference harden the TLS context. SetReadDeadline and RequestReadTimeout defeat slow-drip Slowloris clients. MaxRequestBodySize, MaxHeaderTotalSize and StrictRequestParsing bound request memory and reject smuggled requests. Every flag defaults to the previous behaviour.
The TIdSASLXOAuth2 and TIdSASLOAuth2Bearer mechanisms come packaged with the bundled SMTP, IMAP and POP3 clients, so Gmail and Outlook accounts authenticate through modern OAuth flows.
Keep-alive, timeout and buffer-management adjustments sit on top of the Indy TCP, UDP, HTTP, FTP, SMTP, POP3 and IMAP components, with improved error handling.
Product overview →A native Windows installer detects every Delphi and C++ Builder IDE on the machine, compiles the runtime and design-time packages, registers them, and adds the library, browsing and BPL output paths for you.
Get the packages →Packaged DCU and BPL binaries for Delphi 7 through RAD Studio 13 and C++ Builder 2007 through C++ Builder 13. Indy is distributed as source only, so you build it yourself, per version, by hand.
Editions →Windows 32 and 64 bit, macOS and Linux, for VCL, FireMonkey and console applications, over IPv4 and IPv6. The same source builds under Free Pascal and Lazarus.
Compatibility →sgcIndy builds on the original Indy work by the Indy Pit Crew, Remy Lebeau, Hadi Hariri and the Indy Working Group. It is a distribution, not a fork, and the Indy component model is preserved.
The components keep the Indy model and the Indy class names under the sgcId* prefix, so an existing Indy codebase needs minimal changes to move across.
uses
sgcIdTCPClient, sgcIdSSLOpenSSL;
var
SSL: TsgcIdSSLIOHandlerSocketOpenSSL;
begin
SSL := TsgcIdSSLIOHandlerSocketOpenSSL.Create(nil);
SSL.SSLOptions.SSLVersions := [sslvTLSv1_3];
sgcIdTCPClient1.IOHandler := SSL;
sgcIdTCPClient1.Host := 'api.example.com';
sgcIdTCPClient1.Port := 443;
sgcIdTCPClient1.Connect;
end;Same component model, same class names. The TLS layer underneath is the part that gets brought up to date.
Frames from the sgcIndy quickstart video.
Certificate verification that fails closed, compression and renegotiation off, the server cipher order, read deadlines against Slowloris clients, and bounded request bodies and headers. Nothing changes until you turn a flag on.
Headers for the 1.1.x ABI and the 3.x provider architecture next to the legacy 1.0.x API. Link against current libraries without patching the original SSL units, and use TLS 1.3 where the runtime supports it.
The units keep their names, so your code stays as it is. The installer builds and registers the packages for every IDE it finds, from Delphi 7 to RAD Studio 13 and C++ Builder.
Packaged DCU and BPL binaries are published for each version below. The same source builds under Free Pascal and Lazarus, for VCL, FireMonkey and console applications.
Pick your IDE on the sgcIndy download page. Every package is free to download and royalty free to deploy.
Both editions deliver the same modern, OpenSSL 3.0 ready Indy stack. The difference is source code, support, and the eSeGeCe library bundle around it. sgcIndy is also the custom Indy build behind sgcWebSockets.
Compiled binaries, royalty-free use. No registration, no expiry.
Included in the eSeGeCe All-Access subscription.
The Community edition is free so anyone can drop the binaries into a project without friction. Full source arrives with All-Access, alongside the other eSeGeCe libraries.
Compare the editionsTrusted by Delphi, C++ Builder, Lazarus and .NET developers building networked applications around the world.
Your sgcWebSockets library is very useful and easy to setup. Keep up the good work!
Thanks so much for your help and support, I love your components.
sgcWebSockets is amazing and your support is the best!
Download the free Community edition, run the installer, and keep the code you already have. Full source arrives with All-Access, alongside the other eSeGeCe libraries.
sgcIndy carries the transport. The rest of the suite adds the protocols, the UI, the SDKs and the signatures on top of it.
WebSocket, HTTP/2, MQTT, AMQP, WebRTC, AI and 30+ API integrations for Delphi, C++Builder, Lazarus and .NET.
Build full-stack web interfaces in Delphi and .NET. Server-side HTML components, real-time WebSocket updates and htmx interactivity.
Raw QUIC transport and an HTTP/3 client and server, with WebTransport. Add a modern QUIC/HTTP-3 transport alongside your updated Indy stack.
AI, LLM and MCP components for Delphi and C++ Builder. Seven LLM providers behind one component, plus MCP, embeddings and speech. Standalone, with the sgcWebSockets Core runtime bundled in.
MQTT, AMQP 0.9.1 and 1.0, Apache Kafka and STOMP client components for Delphi and C++ Builder. Standalone, with the sgcWebSockets Core runtime bundled in.
OAuth2 client, JWT client and WebAuthn support for Delphi and C++ Builder. Standalone, with the sgcWebSockets Core runtime bundled in.
HTTP server, HTTP/2 client, gRPC client and Google Cloud Pub/Sub, Calendar and FCM clients for Delphi and C++ Builder. Standalone, with the sgcWebSockets Core runtime bundled in.
REST server, OpenAPI server and OpenAPI client components for Delphi and C++ Builder. Standalone, with the sgcWebSockets Core runtime bundled in.
OpenAPI 3.x parser, Pascal SDK generator and OpenAPI server, plus 1,195+ pre-built SDKs for AWS, Azure, Google Cloud and Microsoft Graph.
Document signatures (XAdES, PAdES, CAdES, ASiC) and code signing (Authenticode, ClickOnce, NuGet, VSIX), with 10 key providers and 21 EU country profiles.
Create, edit, view, sign, redact and validate PDF files in pure Object Pascal, with no DLL to deploy. Licensed on its own.
Windows Hello, fingerprint sensors and facial recognition for Delphi and C++Builder, built on the Windows Biometric Framework.
Packs, add-ons and more
