Addressing community challenges and feedback is a big part of working on open source projects. In response to our recent community survey, the 0.35 release delivers improved performance, new metrics, image signing, and other great goodies….

Despite working for different areas, Prometheus – an open source event monitoring and alerting tool – and Falco – an open source runtime threat detection tool – complement each other to build a reliable monitoring and…

If you’ve been in the cloud native community, chances are you’ve heard the term ‘ctl’ (pronounced cuttle or c-t-l). Just as Kubectl allows you to run commands against Kubernetes clusters, Falcoctl is a command line tool…

gVisor is an application kernel that provides an additional layer of isolation between running applications and the host operating system. This extra layer greatly improves the security of workloads, but can impede container visibility. Discover how…

Project post originally published on the Falco blog by Luca Guerra, Lorenzo Susini, Vicente J. Jiménez Miras In version 0.32.1, Falco first introduced support for gVisor. So, what is it and how can we use it? gVisor, quoting the official…

Falco is the de facto Runtime Security agent for Kubernetes environments, by capturing syscalls it can see everything at Kernel level. With its’ new Plugin system, you can now apply the logic of rules to any…

Guest post originally published on Falco’s blog by Frederico Araujo and Teryl Taylor, IBM Research Hello, fellow Falcoers! This blog introduces you to a new open system telemetry format and project called SysFlow. The project has deep…

Project post originally published on the Falco Blog by Nate Magee and Vicente J. Jiménez Miras GitLab leverages Falco to detect software supply chain attacks with Package Hunter GitLab covers the entire software development lifecycle in a…