Located under Settings > Application Settings, AI Configuration enables the configuration of the AI Analysis feature, which sends Sandfly data to a Large Language Model (LLM) for further security analysis.

AI Configuration Form

The Edit button opens a form containing the following configurable fields:

• AI Agent Enabled - Set this to true to enable the AI Agent and provide access to its settings.
• Results Limit - Set the maximum number of results a user is allowed to select for generating a single analysis.
• Provider - Select an LLM provider; choose from several commercial offerings or an OpenAI-compatible source.
• API Key - Enter the API Key for the selected LLM provider. Toggle on "Set API Key" to access that field.
• Model - Select the LLM model to use for generating analyses; the Model list will be automatically populated based on the selected provider's available models. Models can also be manually entered by typing into the box.

⚠️

WARNING: Protect Private and Sensitive Data

Enabling AI features may send data to an external third-party. Private and sensitive data may be exposed by doing this and is outside the control of Sandfly.

Custom Provider

When the "Custom" option is selected for the Provider field, the form will display two additional fields:

• URL - Enter the base URL for the AI service. Sandfly automatically appends the required API endpoints.
• Server CA Certificate (optional) - If needed by your LLM provider, enter a PEM formatted certificate.