Because we are agentless, we are not tied to the Linux kernel in any way so we work across all of them - including systems over a decade old. This means customers can patch, upgrade or modify their kernel images to their liking and not have to worry about breaking Sandfly, or worry about Sandfly breaking their systems.
As of today, we can work on Linux kernels version 2.6.32 and higher. This means in practice we can support old distributions such as CentOS 6 all the way through the latest kernels without any changes to the remote endpoints.
Our goal is to have total visibility across all Linux systems. Gaps in coverage are a security risk. Sandfly covers the widest range of systems of any product.