Connect Falco to your ecosystem

eBPF (extended Berkeley Packet Filter) Guide. Learn all about the eBPF Tools and Libraries for Security, Monitoring , and Networking.

Response Engine for managing threats in your Kubernetes

Prometheus Metrics Exporter for Falco output events

Falco plugins registry

AI-generated remediations for Falco audit events

Go client and SDK for Falco

Evolution process of The Falco Project

Demonstrating how you can take an action to your intrusions detected by Falco using OpenFaaS functions

Phoenix AMTD Operator for Kubernetes

Fetches the metadata from kubernetes API server and dispatches them to Falco instances

Automated build and mirror of eBPF kernel probes for use as a driver with the Falco runtime security agent (https://falco.org/)

SysFlow edge processing pipeline

Kilt is a project that defines how to inject foreign apps into containers

Configuration files used in the demo for the talk "Prometheus + Falco: The Swiss Army Knife for SREs"

Experimenting to implement Kubernetes Response Engine based on Event-Driven Workflow using Argo Events and Argo Workflows

A Falco Plugin for Rekor Transparency Log Server

Proof Of Concept about adding hot-reloading support to Falco using sidecar container concept in Kubernetes environment

A Falco Plugin that receives Keycloak user/admin events.

A Falco plugin to track Bitcoin transactions in real time