shouldiuse.io

Categories

VERDICT

Should I use ShareFile?

Introducing ShareFile Enterprise - sharefile.com

Depends. Buy it if you're a compliance-heavy firm — accounting, legal, finance — that needs branded client portals and can patch self-hosted components fast. Skip it if you just need file sharing; Google Drive or Dropbox are cheaper with far less security baggage.

Confidence

Medium. Based on ~35 public sources: reviews, security advisories, official pages, and one reseller price listing.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

Standard

~$476/yr (SHI reseller listing)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierNo
PremiumContact sales
EnterpriseContact sales

Best for

  • Accountants & CPAs
  • Finance and legal client document exchange
  • Compliance-driven teams (SOC 2, ISO 27001)
  • MSPs serving regulated clients

Not for

  • Small teams that just need to share files
  • Anyone wanting transparent, cheap pricing
  • Teams unable to patch self-hosted controllers quickly
  • Startups wanting consumer-simple tools

Gotchas - check before you buy

high

StorageZones Controller had critical pre-auth RCEs (CVE-2026-2699/2701); Progress ordered emergency shutdown July 2026

high

Repeat CVE pattern (2021 auth bypass, 2023, 2026 path traversal) demands ongoing patch vigilance

medium

1-year license lists at $476 via reseller SHI; storage overage costs are not published

medium

Billing complaints, including renewal gripes, sit on ShareFile's official forum

Pros and cons

Pros

  • Built-in support for SOC 2, ISO 27001 and similar compliance frameworks
  • Purpose-built secure client portal for document exchange
  • 4.5/5 average rating across roughly 2,567 reviews
  • Doubles as a virtual data room for due diligence
  • Backed by Progress Software after $875M acquisition (2024)

Cons

  • Critical 2026 pre-auth RCE chain forced emergency controller shutdown
  • Opaque pricing; users struggle to find storage costs
  • Billing complaints appear on ShareFile's own support forum
  • Some long-time users are actively migrating away
  • Overkill versus Drive or Dropbox for basic sharing

Sources & method

Analyzed 9/29/2026 - 14 sources - Serious 2026 incident: pre-auth RCE chain (CVE-2026-2699/2701) in StorageZones Controller forced Progress to emergency-shutdown controllers; patch immediately if self-hosting.

official x2review x7security x4news x1
  • Pre-auth RCE chain (CVE-2026-2699, CVE-2026-2701), Chained vulnerabilities in Storage Zones Controller allowed remote code execution before authentication.
  • Emergency shutdown of StorageZones Controllers (July 2026), Progress disabled ShareFile storage controllers amid an active threat; NHS and others issued cyber alerts.
  • CVE-2026-15724 path traversal, Path traversal vulnerability in ShareFile Storage Zones disclosed July 2026.
  • CVE-2021-22941 auth bypass, Earlier Citrix ShareFile authentication bypass vulnerability.

Key stats

  • Value for money: 2/5

    Rating

  • ~$476/yr (SHI reseller listing)

    Starting price

  • 14

    Sources

  • Analyzed

  • Value for money: 2/5. Opaque pricing, reseller quotes, billing complaints
  • Ease of use: 3/5. Sharing called easy; UI gripes persist
  • Feature depth: 4/5. Portals, workflows, data room, compliance tooling
  • Support quality: 2/5. Sales and billing complaints recur publicly
  • Security posture: 1/5. Critical RCE chain forced emergency shutdown
  • 4.5/5 G2 rating ≈2,567 reviews
  • $476/yr Entry price 1-year license via SHI reseller
  • No Free tier Trial only; launched without a free tier
  • $875M Acquired By Progress Software, Sept 2024

Pricing

Standard

~$476/yr (SHI reseller listing)

  • Core file sharing
  • Client portal

Premium

Not disclosed

  • Advanced document workflows
  • See sharefile.com/plans

Enterprise

Not disclosed

  • New enterprise tier
  • Custom security and admin

Security

Serious 2026 incident: pre-auth RCE chain (CVE-2026-2699/2701) in StorageZones Controller forced Progress to emergency-shutdown controllers; patch immediately if self-hosting.

  • Pre-auth RCE chain (CVE-2026-2699, CVE-2026-2701)Chained vulnerabilities in Storage Zones Controller allowed remote code execution before authentication.⁸
  • Emergency shutdown of StorageZones Controllers (July 2026)Progress disabled ShareFile storage controllers amid an active threat; NHS and others issued cyber alerts.10
  • CVE-2026-15724 path traversalPath traversal vulnerability in ShareFile Storage Zones disclosed July 2026.11
  • CVE-2021-22941 auth bypassEarlier Citrix ShareFile authentication bypass vulnerability.

What users say

Users praise easy, secure client document sharing, but a vocal minority of IT admins complain about pricing and sales and are migrating away.

“I hate Sharefile”
Reddit, r/Citrix
“I love ShareFile”
Reddit, r/Citrix
“ShareFile is great, but”
Reddit, r/msp

Alternatives

Compare ShareFile with each alternative.

  • Google Drive

    Far cheaper general sharing; lacks compliance-grade client portals.

  • Dropbox

    Simpler, cheaper sharing for teams without regulatory needs.

    ShareFile vs Dropbox
  • Egnyte

    Direct rival for secure, compliant file sharing.

  • OpenText Core Share

    Enterprise content-collaboration alternative, compared head-to-head on G2.

Companies that use it

  • GreenSky
Full analysis

Based on ~35 public sources: reviews, security advisories, official pages, and one reseller price listing.

Good client-portal sharing for regulated firms; pricey, opaque pricing, and 2026 RCE flaws make patching mandatory.

Methodology

Based on ~35 public sources: reviews, security advisories, official pages, and one reseller price listing.

Sources

  1. news
  2. review
  3. review
  4. review
  5. review
  6. review
  7. review
  8. security
  9. security
  10. security
  11. security
  12. official
  13. official
  14. review

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.