Sandfly Security is a cybersecurity company that focuses on protecting Linux-based systems. Instead of relying on traditional software agents that must be installed on each server, it uses an agentless method to inspect systems remotely. This design allows it to monitor and investigate Linux hosts with very little impact on performance or system stability. Sandfly continuously scans Linux machines for signs of compromise, misconfiguration, and malicious activity. It looks for unusual behavior—such as hidden files, unexpected network connections, or modified system settings—that could suggest an attacker has gained access. The platform can also help during incident response by quickly collecting evidence and highlighting suspicious activity across many servers at once.