falcosecurity repositories

52 repositories

falco-operator
Public
Kubernetes Operator for Falco
Go
•
Apache License 2.0
•7•46•9•1•Updated Aug 29, 2026Aug 29, 2026
kernel-testing
Public
Ansible playbooks to provision firecracker VMs and run Falco kernel tests
ansible kernel tests
ansible kernel tests ebpf ignite falco runtime-security firecracker
Dockerfile
•
Apache License 2.0
•6•15•0•2•Updated Aug 29, 2026Aug 29, 2026
evolution
Public
Evolution process of The Falco Project
kubernetes deployment examples
kubernetes deployment examples k8s adoption falco
Go
•
Apache License 2.0
•48•63•3•1•Updated Aug 29, 2026Aug 29, 2026
community
Public
The Falco Project Community
community office-hours cncf-falco
community office-hours cncf-falco falco-community
Apache License 2.0
•23•57•0•1•Updated Aug 29, 2026Aug 29, 2026
plugin-sdk-rs
Public
Falco plugins SDK for Rust
Rust
•
Apache License 2.0
•5•12•0•1•Updated Aug 29, 2026Aug 29, 2026
k8s-metacollector
Public
Fetches the metadata from kubernetes API server and dispatches them to Falco instances
kubernetes metadata api-server
kubernetes metadata api-server falco
Go
•
Apache License 2.0
•8•22•1•1•Updated Aug 29, 2026Aug 29, 2026
syscalls-bumper
Public
A tool to automatically update supported syscalls in libs
Go
•
Apache License 2.0
•4•5•0•4•Updated Aug 29, 2026Aug 29, 2026
test-infra
Public
Falco workflow & testing infrastructure
automation bots ci
automation bots ci cd governance prow testing-infrastructure prow-jobs falco-prow falco-drivers
Shell
•
Apache License 2.0
•109•33•2•3•Updated Aug 29, 2026Aug 29, 2026
kernel-crawler
Public
A tool to crawl Linux kernel versions
Python
•
Apache License 2.0
•16•25•0•8•Updated Aug 27, 2026Aug 27, 2026
plugins
Public
Falco plugins registry
plugin registry falco
plugin registry falco falco-plugins
Go
•
Apache License 2.0
•110•120•12•27•Updated Aug 24, 2026Aug 24, 2026
falco-website
Public
Source code of the official Falco website
security documentation containers
security documentation containers cncf hacktoberfest
HTML
•
Creative Commons Attribution 4.0 International
•251•39•4•4•Updated Aug 24, 2026Aug 24, 2026
falcosidekick
Public
Connect Falco to your ecosystem
docker kubernetes security
docker kubernetes security falco falco-event response-engine
Go
•
Apache License 2.0
•222•683•8•15•Updated Aug 24, 2026Aug 24, 2026
driverkit
Public
Kit for building Falco drivers: kernel modules or eBPF probes
Go
•
Apache License 2.0
•54•70•0•7•Updated Aug 24, 2026Aug 24, 2026
falcoctl
Public
Administrative tooling for Falco
Go
•
Apache License 2.0
•67•129•4•10•Updated Aug 24, 2026Aug 24, 2026
plugin-sdk-go
Public
Falco plugins SDK for Go
go sdk falco-plugins
go sdk falco-plugins
Go
•
Apache License 2.0
•19•26•1•3•Updated Aug 24, 2026Aug 24, 2026
contrib
Public
Community sandbox to test-drive ideas/projects/code
Python
•
Apache License 2.0
•0•0•0•0•Updated Aug 23, 2026Aug 23, 2026
falco-actions
Public
Run Falco in a GitHub Actions to detect suspicious behavior in your CI/CD
Python
•
Apache License 2.0
•13•52•1•1•Updated Aug 23, 2026Aug 23, 2026
falco-playground
Public
Web-application used to validate Falco rules and test against scap file
wasm hacktoberfest
wasm hacktoberfest
TypeScript
•
Apache License 2.0
•18•21•1•1•Updated Aug 20, 2026Aug 20, 2026
falco-talon
Public
Response Engine for managing threats in your Kubernetes
kubernetes security falco
kubernetes security falco response-engine
Go
•
Apache License 2.0
•20•215•1•6•Updated Aug 17, 2026Aug 17, 2026
rules
Public
Falco rule repository
Go
•
Apache License 2.0
•95•187•1•9•Updated Aug 17, 2026Aug 17, 2026
falco-lsp
Public
Language Server Protocol and VSCode Extension for Falco rules
Go
•
Apache License 2.0
•1•4•1•6•Updated Aug 12, 2026Aug 12, 2026
charts
Public
Community managed Helm charts for running Falco with Kubernetes
Go
•
Apache License 2.0
•320•294•7•1•Updated Aug 11, 2026Aug 11, 2026
libs
Public
libsinsp, libscap, the kernel module driver, and the eBPF driver sources
kmod ebpf libsinsp
kmod ebpf libsinsp falco-drivers libscap
C
•
Apache License 2.0
•197•315•30•23•Updated Aug 10, 2026Aug 10, 2026
falcosidekick-ui
Public
A simple WebUI with latest events from Falco
Vue
•
Apache License 2.0
•20•142•1•11•Updated Aug 10, 2026Aug 10, 2026
dbg-go
Public
A go tool to work with falcosecurity drivers build grid
Go
•
Apache License 2.0
•3•3•0•4•Updated Aug 6, 2026Aug 6, 2026
falco
Public
Cloud Native Runtime Security
kubernetes security containers
kubernetes security containers cncf cloud-native ebpf hacktoberfest falco runtime-security cncf-project
C++
•
Apache License 2.0
•1.1k•9.3k•40•25•Updated Aug 3, 2026Aug 3, 2026
prempti
Public
Falco-powered policy and visibility layer for AI coding agents
Rust
•
Apache License 2.0
•22•201•6•1•Updated Jul 27, 2026Jul 27, 2026
.github
Public
Default community health files
community contributing
community contributing
16•5•0•0•Updated Jul 23, 2026Jul 23, 2026
event-generator
Public
Generate a variety of suspect actions that are detected by Falco rulesets
go security syscall
go security syscall security-testing kubernetes-auditing
Go
•
Apache License 2.0
•43•125•1•0•Updated Jul 23, 2026Jul 23, 2026
testing
Public
All-purpose test suite for Falco and its ecosystem
Go
•
Apache License 2.0
•12•12•0•1•Updated Jul 14, 2026Jul 14, 2026

ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.

Repositories list

52 repositories