Linux File Masquerading and Malicious PIDs | Sandfly 1.2.6 Update
Sandfly 1.2.6 Released This version of Sandfly has many internal performance improvements. Some sandfly checks have been sped up over 50%.
1 min read
Sandfly Security - Agentless Linux EDR and Incident Response : Published Updated
27 August 2025
At Black Hat 2025, a panel of CISOs evaluated pitches from emerging cybersecurity companies and recognized Sandfly Security as a round 2 finalist
Sandfly Security has been selected as a finalist in the 2025 CyberShark Pitch Competition. A panel of CISO judges from a range of industries, including technology, financial services, healthcare, and retail evaluated our pitch at Black Hat 2025 and voted to advance Sandfly based on our agentless endpoint detection and response (EDR) for Linux.

This recognition validates what our customers already know: traditional agent-based EDR solutions have many problems supporting Linux. Linux is not Windows, and shoehorning Windows antivirus approaches onto Linux creates performance impacts, compatibility issues, and coverage gaps.
The CISO judges recognized that Sandfly’s innovative Sandfly's agentless architecture addresses the problems that plague Linux security:
On October 16, 2025, Sandfly will advance to the final round of the competition. More than 3,000 CyberRisk Collaborative members are invited to judge the final round.
Don't wait for October. Try Sandfly's agentless Linux security today – no agents, no performance impact, no drama.
Sandfly 1.2.6 Released This version of Sandfly has many internal performance improvements. Some sandfly checks have been sped up over 50%.
Sandfly CEO Craig Rowland was recently featured on the CISO Series podcast "Security You Should Know" in the episode, "Getting Linux Visibility with...
Sandfly 2.7.0 is now out and features some significant upgrades. Sandfly modules now are tagged with Mitre ATT&CK categories and tactics.