- Change Control
- Cloud
- Compliance
- Cybersecurity
- Endpoint Protection Platform
- Enterprise
- Incident Response
- Internet
Show all 18 topics
No article in the knowledge graph for Sandfly Security yet.
Who is Sandfly Security?
Sandfly Security is a private cybersecurity company that provides agentless Linux security monitoring and threat detection for servers, cloud workloads, and embedded systems.
- Agentless Linux threat detection and host monitoring
- Detection of SSH backdoors, rootkits, malware, and suspicious persistence
- Coverage for on premises, cloud, hybrid, and containerized Linux environments
- Support for incident response, threat hunting, and compliance oriented visibility
- Designed for low overhead deployment without endpoint agents
Show more
More About Sandfly Security
Sandfly Security operates in the cybersecurity market, with a focus on Linux host and workload defense. Its offerings are positioned for organizations that run Linux across data centers, public cloud estates, virtual machines, and operational environments where installing endpoint agents is difficult or undesirable. In enterprise settings, this type of tooling is used by security operations teams, infrastructure teams, and incident responders that need visibility into compromise indicators on Linux systems without adding resident software to every host.
The company is associated with agentless inspection methods for Linux systems, emphasizing remote analysis and detection rather than conventional endpoint agent deployment. In practice, this places it near endpoint security and threat detection categories, but with a narrower domain focus on Linux and Unix-like environments. Common use cases include identifying credential theft activity, unauthorized SSH access, tampering with system binaries, persistence mechanisms, suspicious processes, and signs of rootkits or other stealth malware. This also fits environments where performance sensitivity, change control requirements, or legacy operational constraints limit the use of standard EDR agents.
Its technology domain aligns with Linux security operations, threat hunting, and forensic visibility. Relevant enterprise technologies and environments can include SSH based administration, cloud and virtual infrastructure, container hosts, and internet facing Linux servers. Compared with broader endpoint protection platforms that center on Windows and macOS agent deployment, Sandfly Security is generally described at the category level as an agentless Linux detection platform. That positioning is relevant for organizations standardizing security controls across mixed estates while needing deeper inspection of Linux systems.
From a directory perspective, the company is best understood as a private enterprise software vendor in cybersecurity, specifically in endpoint and server security for Linux environments. Its current solution area centers on Linux threat detection, compromise assessment, and continuous monitoring for enterprise infrastructure.
Our description of Sandfly Security. Updated September 2026.
