You are viewing documentation for Falco version: v0.26.2
Falco v0.26.2 documentation is no longer actively maintained. The version you are currently viewing is a static snapshot. For up-to-date documentation, see the latest version
Black Lives Matter.
The Falco Project takes a stand against racism.
The Falco Project
Cloud-Native runtime security
Access
Deep kernel tracing built on the Linux kernel, eBPF, and ptrace. Enrich kernel events with Kubernetes and container metainformation. See everything.
Assert
Describe security rules against your system. Protect against unknown or unwanted behavior. Detect 0 day vulnerabilities, CVEs, anomalies, and threats.
Action
Take action during an security violation. Build powerful response applications on the Falco APIs in the case of malicious behaviour.
Featured video
Show more videosDevelop
Star Watch ForkBuild secure applications with Falco at the core.
Use Falco with Kubernetes, Linux, and Serverless applications.
Install
Set up Falco to begin development
Configure
Configure Falco using rules, alerts, and other options
The Falco Community is bound to The Linux Foundation privacy policy. When you communicate with us (via email, phone, through the Sites or otherwise), we may maintain a record of your communication.
End-Users
Vendors
Integrations
Falco is a Cloud Native Computing Foundation Incubating project