FileAudit

FileAudit monitors file and folder access across Windows file servers and supported cloud services. On Windows, it records events in real time and associates them with user accounts, IP addresses, and machine names. Alerts can cover denied access, deletions, and mass file events; predefined PowerShell scripts can be set to block or log off a user. Reports include NTFS permissions, changes, ownership, and file or folder properties. Cloud auditing is an add-on for services including OneDrive for Business, SharePoint Online, Microsoft Teams, Google Drive, Dropbox Business, and Box. It reads provider audit logs and collects activity metadata, not file contents; connected providers require a supported subscription plan and administrator authorization. Deployment is agentless, and structured reports are described as supporting GDPR, HIPAA, ISO 27001, and PCI-DSS. Requirements include Windows Server 2012 R2 or later, Windows 8.1 or later, and .NET Framework 4. Pricing is on request, with a 20-day trial limited to three servers. IS Decisions was founded in 2000 and is headquartered in Biarritz, France.

FileAudit combines real-time Windows file monitoring, alerts, and permissions reporting, with cloud auditing available as an add-on. Consider the cloud prerequisites and Windows event-collection dependencies alongside its per-user and per-system subscription basis.

FileAudit suits organizations that need to monitor file activity and permissions across Windows servers, with optional cloud auditing. Its reports and alerts may also suit teams managing compliance and access response.

Overview

FileAudit monitors and reports file and folder access across Windows file servers and supported cloud storage. It suits organizations that need user-linked activity records, alerts, and permissions reporting; cloud auditing adds provider prerequisites and cost. Its strongest case is focused auditing without installing an agent on the Windows server being monitored.

Key features

For Windows file servers, FileAudit records access in real time and associates events with user accounts, IP addresses, and machine names. Alerts can flag denied access, deletions, and mass file events; predefined PowerShell scripts can be configured to block or log off a user. That makes it useful for teams that need an alert to lead to a response, though the actions require configuration.

Permissions reports cover NTFS access, permission changes, ownership, and file or folder properties. Structured reports are described as supporting GDPR, HIPAA, ISO 27001, and PCI-DSS. Agentless deployment avoids installing software on the audited server, but it does not remove the need to configure Windows event collection: suitable audit policies, adequate log capacity, network access, and database configuration all matter.

Cloud auditing supports OneDrive for Business, SharePoint Online, Microsoft Teams, Google Drive, Dropbox Business, and Box as an add-on. Providers require a supported subscription plan and administrator authorization. FileAudit reads provider audit logs and collects activity metadata, not file contents—a useful distinction for organizations assessing access scope.

Pricing

FileAudit is paid, with pricing based on an annual subscription determined by the number of users and systems audited. Team is €28 a year, with 100 users and one server; Small is €48 a year, with 500 users and three servers; Medium is €80 a year, with 1,000 users and five servers. Each offers the cloud audit option. The displayed billing terms say “Per month Billed every 3 years,” so buyers should confirm the payment schedule before committing.

Enterprise has custom pricing and covers 1,000+ users and 5+ servers. The smaller tiers suit organizations whose user and server counts fit their caps; moving up increases those limits. The cloud audit option is available across the tiers, but cloud auditing still depends on an eligible provider subscription and administrator authorization.

A fully featured trial runs for 20 days, supports up to three servers, includes technical support, and requires no commitment. There is no free plan. The separate “Paid from: 40 /mo” figure does not match the named annual plan prices, so confirm the applicable quote and billing terms with the maker.

Platforms

System requirements include Windows Server 2012 R2 or later, Windows 8.1 or later, and .NET Framework 4. Cloud auditing covers the named providers when their subscription and authorization requirements are met. Although FileAudit’s platform categories include Android, iOS, self-hosted, and web, the stated operating-system requirements are Windows-focused.

Who it's for

FileAudit is a practical fit for organizations responsible for Windows file-server access who need attributable activity, permissions reporting, and configurable alerts. It is less compelling for buyers seeking a free tier, or for teams unwilling to maintain Windows audit policies and event-log capacity. Cloud-focused buyers should also weigh the add-on and provider prerequisites.

Pros and cons

• Pros: Real-time events tied to accounts, IP addresses, and machine names give investigators useful context.
• Pros: Alerts can cover denied access, deletions, and mass events, with configurable PowerShell responses.
• Pros: Agentless deployment avoids installing FileAudit on the audited Windows server.
• Pros: Cloud audits collect activity metadata rather than file contents.
• Cons: Windows collection depends on correctly configured audit policies, logs, network access, and database settings.
• Cons: Cloud auditing is an add-on and requires supported provider subscriptions plus administrator authorization.
• Cons: There is no free plan, and the plan billing language merits confirmation before purchase.

Alternatives

For a broader file-integrity-monitoring shortlist, see File Integrity Monitoring Software; for authentication-focused options, browse Multi-Factor Authentication Software.

Paessler PRTG Network Monitor is worth considering when a free tier matters: its Freeware Edition allows up to 100 sensors and about 10 devices, though it is a network-monitoring alternative rather than FileAudit’s file-access focus. Kaspersky Endpoint Security for Business is a better fit when endpoint protection across Windows, Linux, Mac, Android, and iOS is the priority; EDR is an add-on.

Lepide Auditor is another paid auditing option with Core and Advanced plans priced by quote. Netwrix Password Secure suits password-management needs instead, with self-service pricing starting at $60 a year per enabled account and a one-year minimum. PA File Sight is an alternative for file monitoring with a perpetual endpoint option priced at $20 per client computer.

Elastic Security offers a free Security Analytics Essentials tier at $0.09 a month. OWASP Amass is a free, open-source framework, while Vigil Baseline is a free Linux option.

Verdict

Choose FileAudit if your organization needs attributable Windows file-access monitoring, permissions reports, and configurable alerts without deploying an agent on each audited server. Look elsewhere if you need a free plan, cannot support the Windows event-collection setup, or want cloud auditing without an add-on and provider prerequisites.