--- title: "Virto web parts for SharePoint Server: the brief for your IT team" description: "What runs in your SharePoint farm and what leaves it, how Virto web parts install, installer checksums, NATO NCSC tests, licences and cost." url: https://www.virtosoftware.com/virto-on-premises-it-brief/ language: en-US last_modified: 2026-10-26T00:00:00+01:00 translations: de: https://www.virtosoftware.com/de/virto-on-premises-it-brief/index.md --- # Virto web parts for SharePoint Server: the brief for your IT team Someone in your organization wants Virto web parts on your SharePoint farm. These are the answers an IT and security review asks for first. For IT, security and procurement. Checked October 26, 2026. ## At a glance - Runs inside your SharePoint farm - Your content never leaves it - Only licence and update checks go out, over HTTPS - Works without internet: offline activation - Full-trust farm solutions, installed by a farm administrator - SHA-256 checksums for all packages from SharePoint 2016 on - Seven components tested by NATO NCSC, all findings fixed - SharePoint Server Subscription Edition supported ## What the products are Web parts and features for SharePoint Server 2016, 2019 and Subscription Edition; most also have builds for SharePoint 2013. The Virto On-Premises Productivity Kit holds eleven of them: [Kanban Board](https://www.virtosoftware.com/sharepoint/kanban-board-web-part/), [Calendar](https://www.virtosoftware.com/sharepoint/sp-calendar-web-part/), [Notifications & Alerts](https://www.virtosoftware.com/sharepoint/sharepoint-alerts-and-reminders-web-part/), [Form Designer](https://www.virtosoftware.com/sharepoint/sharepoint-forms-designer-web-part/), [Workflow Automation](https://www.virtosoftware.com/sharepoint/workflow-automation-sharepoint-onprem/), [Multiple File Operations](https://www.virtosoftware.com/sharepoint/multiple-file-operations/), [Cross-Site Lookup](https://www.virtosoftware.com/sharepoint/cross-site-cascaded-lookup-feature-web-part/), [Related Items](https://www.virtosoftware.com/sharepoint/sharepoint-related-items-field-type/), [Slideshow & Image Carousel](https://www.virtosoftware.com/sharepoint/sharepoint-image-slider-web-part/), [Password Reset & Recovery](https://www.virtosoftware.com/sharepoint/sharepoint-password-reset-and-recovery-web-part/) and [Active Directory User & Password Manager](https://www.virtosoftware.com/sharepoint/sharepoint-ad-user-profile-service/). [Tab Navigation](https://www.virtosoftware.com/sharepoint/tab-navigation-web-part/) is sold on its own. ## Where your data is - **Everything runs inside your farm.** Your content stays in your SharePoint and never reaches VirtoSoftware. - The products keep their settings in the farm’s property bag and in SharePoint lists, and their licence state on your servers. - The On-Premises EULA says the same: VirtoSoftware does not receive, host, store or process your content, so the Data Processing Agreement does not apply to these products. ## What leaves the farm | Host | Port | What for | What is sent | | --- | --- | --- | --- | | `activation.virtosoftware.com` | 443 | Online activation; a daily subscription check and, for the kit, a weekly one | The serial number, a hash of the SharePoint farm and server IDs, and the product name and version | | `download.virtosoftware.com`, redirecting to `virtostorage.blob.core.windows.net` | 443 | A weekly check for new versions | Requests for the published version files | - That is the complete list for the base products, and all of it is HTTPS: nothing goes out over `http://`. The calls use the server’s default proxy. - The products send no telemetry or usage data. - **Without internet:** activate offline. The farm shows a machine code; you enter it with the serial number on our [offline activation page](https://www.virtosoftware.com/offline-activation/) from any connected computer, and paste the code you get back. A kit subscription is renewed offline through our support by email. The timer jobs that need internet can be switched off. - **Only if an administrator turns them on:** the Google Calendar and Salesforce sources of Virto Calendar route their sign-in through VirtoSoftware’s cloud services; SMS gateways in Notifications & Alerts and Workflow Automation reach the provider you set up, and Workflow Automation activities reach the services a workflow names. ## Installation and privileges - Each product is a **full-trust farm solution** (`.wsp`) with its assemblies in the global assembly cache, plus an SPFx package for modern pages. A farm administrator runs the setup program or `Deploy.ps1`. - The **Virto Web License Manager** installs with each product: pages in Central Administration and timer jobs for licence checks and update notices. - Some products change `web.config` on deployment, for example the maximum request size for file uploads, and some reset IIS. Plan a change window. - Some operations run with elevated privileges under the application pool account. - Each build runs only on the SharePoint version it was built for. ## Installer integrity - Every package for SharePoint 2016, 2019 and Subscription Edition has a **SHA-256 checksum**: in the download window on its product page and as a `.SHA256` file next to the ZIP. Builds for SharePoint 2013 have none. - The setup programs are signed with VirtoSoftware’s own code-signing certificate (`CN=Virto Software`), which ships in the package. It is not issued by a public certificate authority, so Windows shows an unknown publisher until you trust that certificate. - The assemblies are strong-named and not obfuscated, so your security tools can scan them. - A software bill of materials (CycloneDX) is published for Password Reset & Recovery and Active Directory User & Password Manager; for the other products, ask support. ## Security testing The NATO Cyber Security Centre (NCSC) has penetration-tested seven Virto components for SharePoint Server: Kanban Board in March 2024, most of the others in spring 2026. VirtoSoftware holds the NCSC disclosure report for each test, and every finding has been fixed. A test is not a certification. [The components and versions tested](https://www.virtosoftware.com/use-cases/virtosoftware-tested-by-nato/). ## Licences - **A single web part is a perpetual licence** per Web Front-End server. The first year of updates and support is included; after that they renew at 50% of the list price. Without renewal you keep the last version released while your support was active; a later build will not run on that licence. - **The Virto On-Premises Productivity Kit is a yearly subscription** per WFE server, a special offer for all eleven web parts. It renews at the full kit price; when it ends, the web parts keep working for 45 days and then stop until you renew. - Development and test servers need a Developer licence. ## SharePoint versions Microsoft ended support for SharePoint Server 2016 and 2019 on July 14, 2026 ([Microsoft Learn](https://learn.microsoft.com/lifecycle/end-of-support/end-of-support-2026)). Subscription Edition has no fixed end date. Every Virto web part has a download for Subscription Edition. ## Certifications, plainly | Question | Answer | | --- | --- | | SOC 2, ISO/IEC 27001 | VirtoSoftware has neither and does not plan to. | | Penetration testing | Seven components tested by NATO NCSC, all findings fixed. | | Your questionnaire | We fill in your organization’s own form. | More for legal and security reviewers, including the EULA terms and how to request our security policies under NDA: [Security & Compliance](https://www.virtosoftware.com/security-compliance/). ## On this page - What the products are - Where your data is - What leaves the farm - Installation and privileges - Installer integrity - Security testing - Licences - SharePoint versions - Certifications, plainly - What it costs ## What it costs Buy the web parts you need one by one, or all eleven in one subscription. ### Single web parts From $549 per WFE server - Perpetual licence - First year of updates and support included - Then renew at 50% of the list price - 30-day free trial [All SharePoint On-Premises web parts →](https://www.virtosoftware.com/sharepoint/) ### Virto On-Premises Productivity Kit $5,500 per WFE server per year - All 11 web parts in one subscription - Updates and support included - Web parts stop 45 days after it ends [See the kit →](https://www.virtosoftware.com/bundles/virto-one-license/) ### Development and test servers Developer licence - Sold together with a production licence - Ask sales for a quote [Licences and renewal →](https://www.virtosoftware.com/pricing/#license-renewal) ## Questions from your review? Send us your security questionnaire, or book a call to go through the review with us.