Sandfly is an agentless security platform for Linux. Sandfly automatically hunts for hackers, malware, and suspicious activity across your Linux systems without loading endpoint agents. Sandfly has many unique features to help rapidly secure and monitor Linux:

• Works without performance or stability impacts.
• Finds unknown hacking and intruder activity.
• Detects advanced malware including stealth rootkits.
• Tracks SSH credential usage to help find misconfigurations and abuse.
• Audits login credentials for weak passwords and abuse potential.
• Allows customized threat hunting modules tailored to your unique environment.
• Fast deployment to get results in seconds with continuous threat monitoring.
• Free 20 host license included.

Sandfly works on most Linux distributions and CPU types without any compatibility issues.