Find what's hiding on your Linux systems

Full access to Sandfly, FREE for 14 days.

Attackers hide in plain sight on Linux, fake processes, tampered binaries, rogue SSH keys. Sandfly finds them.

Nothing to install and no sales call. Sandfly works over SSH, so most people are up and scanning quickly.

Licence within one business day. No sales call required.

We'll review your request

We will issue you a trial license within one business day. There's no sales call required.

You get your licence and guide

Your licence arrives with the install guide. Sandfly runs in Docker on a Linux VM you control, most teams are up in under 30 minutes.

Connect your hosts and scan

Point Sandfly at your Linux environment over SSH and run your first scan. Nothing gets installed on the hosts themselves.

#hs_cos_wrapper_widget_1790050046246 .cp-faq__a { grid-template-rows: 1fr !important; } #hs_cos_wrapper_widget_1790050046246 .cp-faq__a[hidden] { display: grid !important; } #hs_cos_wrapper_widget_1790050046246 .cp-faq__a-inner { overflow: visible !important; }

Before you start

+64 3 3792313

4 Ash Street Christchurch, New Zealand 8011

Connect With Us

Product Navigation

General Navigation

Get Blog updates

© 2026 Sandfly Security, Ltd. End User License Agreement & Privacy Policy. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries.

Find what's hiding on your Linux systems

What to expect

Before you start

What access does Sandfly need?

Where does my data go?

Will it slow down production systems?

What happens at the end of 14 days?

Connect With Us