Only changed files
Files are compared by SHA-256 checksums, so you send a few files instead of the whole project.
Website deployment for PHP hosting
Upload only what changed
Drop your project folder, see exactly what will change and send only the new and changed files. Every file is verified, and a backup is made before anything is replaced.
Three steps instead of uploading everything again
You do not have to remember which files you changed. SyncDrop compares them for you.
-
1
Drop the folder
Your browser computes SHA-256 checksums and the server compares them with what it already has. File contents stay on your computer until you click Send.
-
2
Review the changes
You get a list of new and changed files, each with a code preview compared to the version on the server.
-
3
Send
Files are uploaded in chunks and verified. They are replaced only once everything has arrived, and an error along the way undoes every change.
See every change before you send it
The Preview button next to a file compares the version on the server with the new one, line by line.
- Syntax highlighting for PHP, JavaScript, CSS, HTML, JSON, SQL, YAML, Markdown and .htaccess
- Unchanged parts are folded, so you see straight away what is different
- Full view of the new version and of the one on the server
- .env and .git files can never be previewed or uploaded
Everything you need for a calm deployment
One folder on your server. No installer, no database, no third-party services.
Backup and rollback
A backup is made before files are replaced. In History you can restore the state from before the latest deployment.
Code preview
A diff with syntax highlighting, line numbers and folded unchanged parts.
Works anywhere
In a subfolder of your site, as a subdomain or on its own domain. Several copies on one hosting account never mix.
One-click updates
Packages are digitally signed and verified before they are installed. A backup is made before every update and can be restored.
Everything on your server
Fonts, icons and scripts ship with the package. Account data is kept outside the public folder of your site.
Built as if someone were always trying to break in
SyncDrop can write to your website files, so signing in and uploading are protected on several levels.
Mandatory 2FA
Signing in takes your password and a code from an authenticator app, plus 10 one-time recovery codes.
Bot protection
Proof-of-work and bot traps, and after failed attempts a digit captcha and a question for AI agents.
Automatic IP bans
Scanners and suspicious requests collect points. Past the limit the address is banned for a day, a week, then a month.
Distributed attack lock
When failed sign-ins come from many addresses at once, sign-in pauses for 10 minutes. Your trusted address can still sign in.
E-mail alerts
A message for every sign-in, lockout, ban, recovery code use and password change.
Safe with your files
SyncDrop never deletes anything on the server and never overwrites .env, .git or its own data.
Installed in a few minutes
No SSH access or server configuration needed.
- Download the package and upload the contents of the syncdrop folder to a subfolder of your site or to the root folder of a subdomain.
- Open that address in your browser. SyncDrop creates a file with a setup code outside the public folder.
- Copy the code from that file in your hosting file manager and create the administrator account.
- Scan the QR code with an authenticator app and save the recovery codes.
Frequently asked questions
Does SyncDrop delete files on the server?
No. It only sends new and changed files. Files that are not in your folder stay on the server untouched.
Can I upload a ZIP archive?
No, you drop a regular folder. Nothing is unpacked on the server, and every file is checked on its own.
What happens if the upload stops halfway?
Files are replaced only after all of them have arrived and their checksums match. An error while replacing undoes every change.
Where are my password and settings stored?
In a folder outside the public directory of your site. The password is stored only as an Argon2id hash.
Can I deploy several websites?
Yes. Add more destinations in Settings, each with its own exclusion list.
Does SyncDrop work without HTTPS?
Only locally on your own computer. On a server it requires HTTPS, so passwords and files never travel in plain text.
Can I use SyncDrop for client work?
Yes. SyncDrop is released under the SA-SDL license, so you can use it for free to deploy your own and your clients’ websites, including ones that make money. Approval is only needed to sell SyncDrop itself as a product or service once it brings in more than 1,500 USD a month.
Stop uploading the whole project for every fix
Download SyncDrop, upload one folder and deploy only what changed.