Sandfly is an agentless threat detection and incident response platform purpose-built for Linux. Sandfly is best understood as a compromise detection ...

Agentless means that Sandfly does not require installing any agents on your endpoints. As a result, unlike most endpoint-focused solutions available today, ...

We secure the widest range of Linux systems of any product on the market and protect virtually all distributions of Linux. This spans, for example, sy...

If you have a system that Sandfly cannot protect, you will simply get an error message in the management console when you try to add it. There is no harm ca...

Because we are agentless, we are not tied to the Linux kernel in any way so we work across all of them - including systems over a decade old. This also mean...

Yes - Sandfly is compatible and able to run in both private or public Cloud environments. Because Sandfly is software-based and was developed largely ...

Basically, as many as you have resources to protect. The server/node architecture of Sandfly can be distributed using named queues and jump hosts to scale a...

Yes. Sandfly is designed to run across multiple distributed and secured network segments easily. Sandfly uses a server/node architecture. The nodes ca...

A basic install requires one or more systems capable of running Docker (Sandfly is Dockerized) with these minimum requirements: A server with a minimum 2...

To keep install easy and fast, we offer automated installation scripts. They take only a few minutes of your time to set up and run. Once installed, y...