Kiteworks Secure MFT Server gets Drummond AS2 certification

Kiteworks said its Secure MFT Server v9.4 has earned Drummond Group AS2 certification after interoperability testing in the AS2-2Q26 and AS2-4Q25 events. The validation adds to the company’s security credentials as enterprises look for file transfer tools that can prove both protection and standards-based partner interoperability.

Why it matters: - Drummond AS2 certification gives enterprises third-party proof that Kiteworks Secure MFT Server v9.4 can exchange sensitive business data with trading partners using a common B2B standard. - The certification matters for organizations in retail, financial services, manufacturing, logistics and government that rely on secure EDI, XML and binary data transfer. - Kiteworks said the validation adds another layer to its security posture at a time when legacy managed file transfer systems remain a target for attackers.

What happened: - Kiteworks announced that Secure MFT Server v9.4 is listed by Drummond Group as an AS2 certified product for the AS2-2Q26 and AS2-4Q25 interoperability test events. - The certification marks the 50th round of interoperability testing for the IETF AS2 standard. - Drummond’s testing confirmed that Kiteworks Secure MFT Server v9.4 can send and receive standards-based AS2 messages with full payload integrity, digital signatures, encryption and receipt verification across trading partner ecosystems.

The details: - AS2 is a secure peer-to-peer business data interchange standard over HTTP used to move regulated data between organizations. - Drummond’s AS2-2Q26 event required participating products to send and receive messages within a full product test group. - The testing covered message structure, security requirements, payload integrity, digital signatures, encryption, HTTP and HTTPS transports, synchronous and asynchronous receipts, and data compression. - Drummond also tested error handling by sending corrupted messages and requiring products to return the proper MDN error statuses. - Kiteworks said the results show Secure MFT Server v9.4 can recognize transaction failures and return the structured error signals that automated B2B workflows depend on. - The certification is listed in Drummond’s certified-products directory for both AS2-2Q26 and AS2-4Q25. - Kiteworks Secure MFT Server supports vault-to-vault transfers, trading partner onboarding, scheduling, workflow authoring and graphical monitoring. - The platform runs on a hardened virtual appliance and includes granular policy controls, DLP, ATP, CDR, SIEM reporting and visibility into data entering and leaving the enterprise.

Between the lines: - Drummond AS2 certification extends a broader validation portfolio that already includes FedRAMP authorization, ISO 27001 certification, SOC 2 Type II audit, IRAP and BSI C5. - Those certifications validate Kiteworks’ internal controls, while AS2 certification shows the platform can interoperate with outside trading partners in a full-matrix test. - Kiteworks said 59% of organizations reported an MFT security incident in the prior 12 months, citing its 2025 MFT Survey Report. - The company also said four separate MFT platforms shipped critical-severity vulnerabilities exploited within hours of disclosure across 2024, 2025 and into 2026. - The message is clear: file transfer vendors are being judged on both security architecture and proof that their systems work in real partner ecosystems.

What's next: - Kiteworks said the AS2 listing reflects continued validation across consecutive test events. - The company will likely use the certification to support enterprise buyers evaluating MFT tools for regulated data exchange.

The bottom line: - Drummond AS2 certification gives Kiteworks another independent signal that its Secure MFT Server is built for both secure data handling and standards-based partner interoperability.