Sandfly is fully Dockerized. You need two systems capable of running Docker with these minimum requirements:

  • A Server with 2GB or more of RAM running Linux for smaller deployments and scaling up from there. This server runs the REST API and database.
  • A Node with 2GB of RAM running Linux. A Node system actually runs multiple node containers for performance and redundancy. You can spin up a large number of node containers to handle very large installations without any trouble. Each node can scan 500 systems at a time so you can cover thousands of hosts very easily.


Once installed, you add the hosts you want protected and that’s it. You don’t have to touch any of the remote hosts.