Falco, Sysdig’s open source project for monitoring container runtimes, left the Cloud Native Computing Foundation’s (CNCF) sandbox today after its Technical Oversight Committee (TOC) voted to advance the project into incubation. The Falco project joins 14 other Incubating projects at CNCF as the first and, so far, only security runtime platform.