Keryx

Move data fast. S3, peer-to-peer, or both.

ML-optimized. End-to-end encrypted. Resumable.
A fraction of the cost of Aspera or Signiant.

Join the Beta GitHub Coming Soon

3.2 Gbps

S3 transfers
From datacenter to cloud

976 Mbps

From home internet
97.6% of gigabit pipe utilized

11.2x faster

Than SCP over WAN
Athens → Singapore via relay

See It In Action

2GB upload to S3 in 20 seconds. ML predicted 754 Mb/s, delivered 834 Mb/s.

2GB P2P transfer with real-time speedtest and bandwidth monitoring.

Benchmarked Performance

Real tests. Real networks. No simulations.

P2P Transfers (Residential Gigabit, 10GB File)
Route Time Throughput Encrypted Verified
Keryx (Athens → Singapore via London) 1m 24s 976 Mbps ✓ ChaCha20 ✓ BLAKE3
Keryx (Athens → LA via relay) 1m 25s 964 Mbps ✓ ChaCha20 ✓ BLAKE3
Keryx (Athens → Singapore direct) 1m 49s 770 Mbps ✓ ChaCha20 ✓ BLAKE3
SCP (Athens → LA) 16m 24s 87 Mbps ✓ ✗

Athens → Singapore: 15,000+ km. Relay routing through London. Line saturated at 97.6% utilization.

Datacenter Performance (10 Gigabit)

CPU-Bound, Not Network-Bound

  • 10 Gbps line, 2 vCPU datacenter instance: 1840 Mbps at 70% CPU
  • Performance scales linearly with core count
  • Add 2 vCPU → +20% throughput (tested up to 4 cores)
  • Bottleneck is end-to-end encryption, not network
S3 Transfers (10GB to Wasabi)
Route Keryx AWS CLI Advantage
LA → San Jose (datacenter) 3,219 Mbps 1,121 Mbps 2.9x faster
LA → Italy (datacenter) 1,100 Mbps 244 Mbps 4.5x faster
Athens → Italy (home, behind NAT) 903 Mbps 238 Mbps 3.8x faster
Athens → San Jose (home, behind NAT) 579 Mbps 176 Mbps 3.3x faster

All Keryx transfers include end-to-end encryption and BLAKE3 integrity verification.
AWS CLI and SCP do not verify file integrity. Full methodology →

One Tool. Three Modes.

Cloud Mode

Direct transfers to S3-compatible storage.

  • AWS S3, Wasabi, Backblaze B2, Cloudflare R2
  • ML-optimized for your network conditions
  • Resumable uploads and downloads
  • Directory sync with structure preservation

Direct Mode

Peer-to-peer through firewalls and NAT.

  • No cloud, no egress fees, no waiting
  • NAT traversal with automatic relay fallback
  • Works through corporate firewalls
  • End-to-end encrypted, relay cannot decrypt

Watch Mode

Set it and forget it. Automatic sync.

  • Local ↔ S3 bidirectional sync
  • Real-time file system monitoring
  • Conflict resolution with archiving
  • Mass change protection

Desktop App

Clean interface. No learning curve.
Available for macOS (Apple Silicon), Linux, and Windows 10/11. (Click to zoom)

Keryx S3 Browser - Media Production

Post-production workflow. 32GB MXF uploading at 2.2 GB/s.

Keryx S3 Browser - Enterprise Backup

Infrastructure backups. Multi-region DR at 3.5 GB/s.

Keryx P2P Transfer

Direct P2P transfer. End-to-end encrypted, no cloud required.

Speed and Data Integrity First

Encrypted

End-to-end encryption
ChaCha20-Poly1305 (P2P) / AES-256 (S3)

Verified

Every chunk hashed and verified
BLAKE3 checksums

Resumable

Crashes don't mean starting over
Chunk-level tracking

Self-Optimizing Transfers

Keryx uses a contextual bandit ML algorithm that learns from every transfer:

  • Adapts to your network conditions in real-time
  • Gets faster the more you use it
  • No manual tuning required
  • ML decisions explained in real-time (optional)
[ML] Analyzing network conditions...
[ML] Selected optimal strategy for this route
[ML] Predicted: 754 Mb/s
[ML] Achieved: 803 Mb/s (+6.5%)
Transfer completed at 803 MB/s

Full visibility into ML performance. Your data, on your device.

Keryx ML Transfer Statistics

Power User Mode shows ML decisions in real-time.

The Right Tool for the Job

Use Cloud Mode When
  • Sharing with multiple recipients
  • You need persistent storage
  • Archival and backup
  • Recipients download on their schedule

Keryx saturates your connection to S3. ML-optimized chunks. Resumable.

Use Direct Mode When
  • Sending to one person, right now
  • Avoiding egress fees
  • Data doesn't need to persist in cloud
  • Both parties are online

Peer-to-peer through NAT. No cloud middleman. No egress costs.

Use Watch Mode When
  • Continuous backup to S3
  • Syncing working folders across sites
  • Automated DR replication
  • Media ingest pipelines

Background daemon. Integrity verified. Conflict-aware.

All three modes: encrypted, verified, resumable. One tool.

Quick Start

P2P Transfer
# Sender (creates room)
keryx upload --p2p -f ./large-file.zip
# Output: Room code: ABC123...

# Receiver (joins room)
keryx download --p2p -k ABC123... -f ./output/
S3 Transfer
# Configure once
keryx config --name "My Bucket" --bucket my-bucket \
  --endpoint https://s3.wasabisys.com --region us-west-2

# Upload
keryx upload -f ./data/ -k backup/data/

# Download
keryx download -k backup/data/ -f ./restored/
Watch Mode (Auto-Sync)
# Add a watch rule (local folder → S3)
keryx watch add --name "Backup" \
  --source-type local --source ./projects \
  --dest-type s3 --dest backups/projects/

# Start the daemon
keryx watch start

# Check status
keryx watch status

Feature Comparison

How Keryx stacks up against the competition.

Feature Keryx SCP MASV Aspera Signiant
Direct P2P Transfer ✅ ❌ ❌ ❌ ❌
Works Behind NAT ✅ ❌ ✅ ❌ ✅
End-to-End Encryption ✅ ✅ ✅ ✅ ❌
Integrity Verification ✅ ❌ ❌ ✅ ❌
Resumable Transfers ✅ ❌ ✅ ✅ ✅
Real-Time ML Optimization ✅ ❌ ❌ ❌ ❌
ML Data Stays On-Device ✅ N/A N/A N/A ❌
Free CLI ✅ ✅ ❌ ❌ ❌

Signiant uses TLS transport encryption; relay servers can access plaintext. Signiant ML is offline analytics, not real-time optimization.

Feature Keryx AWS CLI rclone Aspera Signiant
Real-Time ML Optimization ✅ ❌ ❌ ❌ ❌
ML Data Stays On-Device ✅ N/A N/A N/A ❌
Saturates Available Bandwidth ✅ ❌ ⚠️ ✅ ✅
Per-Chunk Integrity Verification ✅ ❌ ❌ ✅ ❌
Resumable Transfers ✅ ✅ ✅ ✅ ✅
Works Behind NAT ✅ ⚠️ ⚠️ ❌ ✅
Desktop GUI ✅ ❌ ❌ ✅ ✅
Free CLI ✅ ✅ ✅ ❌ ❌

Signiant ML is offline analytics, not real-time optimization. rclone bandwidth saturation depends on manual tuning.

Full methodology and detailed comparison →

Pricing

Free Forever

Full speed. No throttling. No tricks.

✓ S3 transfers (1 profile)
✓ Direct P2P (unlimited)
✓ LAN transfers (unlimited)
✓ ML optimization
✓ Encryption & verification
✓ Resumable transfers

Upgrade when you need GUI, multiple cloud profiles, automated sync, or relay fallback.

No hard caps. Use what you need, get warned at 80% and 90%, pay overage at end of month.

Solo

$20/mo

100 GB relay included

  • Everything in Free
  • Desktop GUI
  • Unlimited S3 profiles
  • Relay network access
  • Watch mode

Overage: $0.15/GB

Plus

€79/mo

1 TB relay included

  • Everything in Solo
  • Priority support

Overage: €0.08/GB

Pro

€199/mo

5 TB relay included

  • Everything in Plus
  • Premium support

Overage: €0.06/GB

Team

€449/mo

20 TB relay included

  • Everything in Pro
  • 5 seats included
  • Team management

Overage: €0.04/GB

Enterprise

Custom

Unlimited relay

  • Everything in Team
  • Unlimited seats
  • Dedicated relay server
  • SLA & dedicated support
  • Custom deployment
Contact Us

Desktop GUI: One month of any paid plan unlocks the GUI forever. Available for macOS (Apple Silicon), Linux, and Windows 10/11.
Updates require active subscription. Relay quota matches your plan.

vs Competition
Monthly Transfer Keryx MASV IBM Aspera Signiant
100 GB $20 $220 $950+ $8,500+/yr
1 TB €79 $220 $950+ $8,500+/yr
5 TB €199 $1,100 $4,750+ $8,500+/yr
20 TB €449 Custom $19,000+ Custom

Plus: Keryx S3 and direct P2P transfers are free and unlimited. Competitors charge for everything.

Early Adopter Pricing

Lock in these rates for life. Limited to first 100 customers.

Moving serious data? Video production, large datasets, backups?
We want to hear your use case.

Contact Form

Built with Rust 🦀 by NetViper