Ericsson Partners with Sandfly to Strengthen Telecom Security
27 February 2026
Ericsson has strengthened its telecom cybersecurity offering with an Agentless Endpoint Detection and Response (EDR) capability designed for telco networks and mission-critical systems. The new solution enhances Ericsson Security Manager Extended Detection and Response (XDR) portfolio with continuous threat detection and response without requiring intrusive endpoint agents on production systems.
The Agentless EDR, created in partnership with Sandfly Security, addresses the unique operational and security needs of communications service providers (CSPs) and other critical infrastructure operators.
Agentless EDR continuously monitors system behavior in mission critical Linux-based environments where installing traditional agents can jeopardize stability, performance or uptime.
Minimizing operational risk and simplifying security operations, the solution provides advanced threat detection, threat hunting capabilities, and continuous visibility while preserving system stability.
Key benefits of Ericsson’s Agentless EDR include:
- Advanced Linux threat detection for mission-critical systems
- Rapid incident investigation and root-cause identification
- Broad Linux platform support, covering widely used distributions and architectures
- Air gapped, on-premises solution supporting mission-critical system requirements
Keijo Mononen, Head of Security Solutions at Ericsson, says: “Telecom networks are essential to the connected world, supporting critical services and infrastructure that must remain available at all times. By integrating Agentless EDR into the Ericsson Security Manager XDR solution, we enhance our customers' detection capability and security visibility where traditional endpoint agents are unsuitable — strengthening security while preserving operational continuity.”
Craig Rowland, Founder and CEO of Sandfly, says: “We are proud to partner with Ericsson to bring agentless, Linux-focused EDR to mobile network operators. This collaboration enables operators to gain high-fidelity threat detection and deep forensics on critical infrastructure without the risks of deploying agents.”
Commercial availability is aligned with customer demand throughout 2026. Sandfly Security is a New Zealand-based cybersecurity firm that provides an agentless, automated detection and response platform specifically for Linux systems.
ABOUT ERICSSON:
Ericsson’s high-performing, programmable networks provide connectivity for billions of people every day. For 150 years, we’ve been pioneers in creating technology for communication. We offer mobile communication and connectivity solutions for service providers and enterprises. Together with our customers and partners, we make the digital world of tomorrow a reality. www.ericsson.com