Five components cover both ends of an SSH connection. TsgcSSHClient runs remote commands, opens an interactive shell and forwards ports. TsgcSFTPClient and TsgcSCPClient move files and whole folders. TsgcSSHServer and TsgcSFTPServer put your own SSH and SFTP service inside your application. The hybrid key exchange mlkem768x25519-sha256 is offered first on both sides. Standalone, the sgcWebSockets Core runtime is included.
Each one is a non-visual component you drop on a form or create in code. Set the host and the credentials, wire the events, then connect or start listening. The .NET classes carry the same names, so an SSH workflow reads the same in both languages.
TsgcSSHClient connects with a password or a private key, and OnSSHHostKey hands you the host key fingerprint to check. Execute runs a command and returns its output in one call. RequestPTY and RequestShell open an interactive terminal, and OpenDirectTCPIP and RequestForwarding forward ports in both directions.
TsgcSFTPClient speaks SFTP v3 over the same SSH connection. ListDirectory returns names, sizes and dates, Put and Get move a file in one call, and Rename, Delete, MakeDirectory and RemoveDirectory cover the rest. Transfers keep 16 requests in flight instead of waiting for each block.
TsgcSCPClient copies files over SSH to any server that allows the scp command, with no separate file transfer service. UploadFolder and DownloadFolder copy a folder tree recursively, and PreserveTimes keeps the modification and access times on the other side.
TsgcSSHServer listens on the port you choose with Ed25519, ECDSA or RSA host keys, and GenerateHostKeyEd25519 creates one for you. OnSSHAuthPassword and OnSSHAuthPublicKey decide who gets in, OnSSHExec answers remote commands and OnSSHShell serves an interactive session.
TsgcSFTPServer serves SFTP v3 and scp transfers from RootFolder, and clients cannot leave it. OnSFTPUserRoot gives every user a folder of its own, ReadOnly refuses changes, and OnSFTPOperation fires for every open, rename, remove and listing, so you allow, deny and log each one.
The hybrid mlkem768x25519-sha256 exchange combines ML-KEM-768 with X25519, so a session recorded today stays private against a future quantum computer. PostQuantumKex is on by default, and the client and the server offer it first. Strict key exchange closes the Terrapin attack.
The same five components in Delphi 7 to 13 on Windows 32 and 64 bit and Linux 64 bit, and in .NET 8, 9 and 10 and .NET Standard 2.0. The .NET version is fully managed code with no OpenSSL to deploy. Both run inside a desktop app, a console tool or a service.
Platforms →sgcSSH is a standalone package. It bundles the sgcWebSockets Core runtime and the native cryptography the key exchange runs on, and every license ships with full source code, so the protocol code steps through in your own debugger. Deployment is royalty-free.
See pricing →Reference pages for each component:
The clients follow one shape: set the host and the credentials, connect, call a method. The servers follow another: set the port and the host key, wire the events, activate.
var
SSH: TsgcSSHClient;
SFTP: TsgcSFTPClient;
begin
// run a command
SSH := TsgcSSHClient.Create(nil);
SSH.Host := 'build01.example.com';
SSH.Port := 22;
SSH.Authentication.Username := 'deploy';
SSH.Authentication.PrivateKeyFile := 'C:\keys\id_ed25519.pem';
SSH.OnSSHHostKey := SSHHostKey; // check the fingerprint
SSH.Connect;
Memo1.Text := SSH.Execute('uname -a');
SSH.Disconnect;
// upload a file over SFTP
SFTP := TsgcSFTPClient.Create(nil);
SFTP.Host := 'files.example.com';
SFTP.Authentication.Username := 'partner';
SFTP.Authentication.Password := 'secret';
SFTP.Connect;
SFTP.Put('C:\export\invoices.zip', '/upload/invoices.zip');
SFTP.Disconnect;
end;begin
SFTPServer := TsgcSFTPServer.Create(nil);
SFTPServer.RootFolder := 'D:\sftp';
SFTPServer.SFTP := True;
SFTPServer.SCP := True;
SFTPServer.OnSFTPUserRoot := SFTPUserRoot;
SSHServer := TsgcSSHServer.Create(nil);
SSHServer.Port := 2222;
SSHServer.HostKeyFiles.Text := 'hostkey_ed25519.pem';
SSHServer.OnSSHAuthPassword := SSHAuthPassword;
SSHServer.SFTPServer := SFTPServer;
SSHServer.Active := True;
end;
procedure TForm1.SFTPUserRoot(Sender: TObject; const aUsername: string;
var aRootFolder: string);
begin
aRootFolder := 'D:\sftp\' + aUsername; // one jail per user
end;PostQuantumKex is on by default, so every session negotiates mlkem768x25519-sha256 whenever the other side supports it. The full quick start →
OnSSHHostKey to check the server's fingerprint.Execute for a command, Put and Get for SFTP, UploadFolder for scp, with progress events for every transfer.TsgcSFTPServer to TsgcSSHServer, decide who signs in from your own user store, and any standard ssh, sftp or scp client connects.What sgcSSH negotiates, whether you already own these components, what the Delphi version builds on, and how to try it. The answers are short, and they are on this page rather than in the small print.
side component job
client TsgcSSHClient exec, shell, pty, port forwarding
client TsgcSFTPClient SFTP v3, 16 requests in flight
client TsgcSCPClient files and folder trees
server TsgcSSHServer password, public key, exec, shell
server TsgcSFTPServer SFTP v3, SCP, jail per user
key exchange, offered in this order
mlkem768x25519-sha256 hybrid post-quantum
curve25519, ECDH, DH group14 and group16
ciphers AES-GCM, AES-CTR
keys Ed25519, ECDSA, RSADemos\27.SSH cover each one.Key exchange, authentication, channels and transfers are all first-class methods and events, and full source code means nothing in between is a black box. Every component and property →
sgcSSH is one package of the sgcWebSockets family. Buy it standalone with the Core runtime bundled in, or get all five components with sgcWebSockets Enterprise or All-Access.
The SSH, SFTP and SCP clients and the SSH and SFTP servers, standalone, with the sgcWebSockets Core runtime included.
The same package, licensed for a whole team or a whole site.
The full library: WebSocket clients and servers, HTTP/2, IoT, P2P and AI components. Its Enterprise edition includes the SSH and SFTP components too.
If you own sgcWebSockets Enterprise or All-Access you already have all five components. sgcSSH is for SSH and SFTP without licensing a full sgcWebSockets edition.
View pricing and licensesTrusted by Delphi, C++ Builder, Lazarus and .NET developers around the world.
Your sgcWebSockets library is very useful and easy to setup. Keep up the good work!
sgcWebSockets is amazing and your support is the best!
Thanks so much for your help and support, I love your components.
Three clients and two servers in one package, with the sgcWebSockets Core runtime bundled in and full source code in the box.
sgcSSH is one of the eSeGeCe component libraries for Delphi, C++ Builder and .NET. They share conventions, they ship with full source, and they deploy royalty-free.
WebSocket, HTTP/2, MQTT, AMQP, WebRTC, AI and 30+ API integrations for Delphi, C++ Builder, Lazarus and .NET. This is where the Core runtime lives.
The custom Indy library sgcWebSockets Enterprise is built on, packaged as an add-on. Required by the Delphi SSH components, always included in sgcSSH orders.
Symmetric and asymmetric ciphers, hashing and post-quantum algorithms such as ML-KEM and ML-DSA. Ships free from sgcWebSockets Standard up.
OAuth2 and JWT clients, WebAuthn passkey sign-in, TOTP, LDAP, SAML and OpenID Connect. Standalone, with the sgcWebSockets Core runtime bundled in.
HTTP server, HTTP/2 client, gRPC client and Google Cloud Pub/Sub, Calendar and FCM clients for Delphi and C++ Builder. Standalone, with the sgcWebSockets Core runtime bundled in.
MQTT, AMQP 0.9.1 and 1.0, Apache Kafka and STOMP client components for Delphi and C++ Builder. Standalone, with the sgcWebSockets Core runtime bundled in.
REST server, OpenAPI server and OpenAPI client components for Delphi and C++ Builder. Standalone, with the sgcWebSockets Core runtime bundled in.
AI, LLM and MCP components for Delphi and C++ Builder. Seven LLM providers behind one component, plus MCP, embeddings and speech. Standalone, with the sgcWebSockets Core runtime bundled in.
Telegram and WhatsApp Business client components for Delphi and C++ Builder. Standalone, with the sgcWebSockets Core runtime bundled in.
Server-side HTML and UI components on Bootstrap 5 and htmx, for web applications written in Delphi.
XAdES, PAdES, CAdES and ASiC for documents, Authenticode, ClickOnce, NuGet and VSIX for code.
Packs, add-ons and more
