SCP and SFTP are both part of OpenSSH, the secure shell server we run. Do note that you cannot use SFTP with an FTP only user - despite the name, SFTP has fairly little in common with FTP. In other words, you must enable shell access for a user before you can use SFTP (or SCP) with that account.
For some suggestions, check out http://freessh.org/.