Falco Logo

Falco

0
Free
Visit Website

Falco is a cloud native runtime security tool for Linux operating systems designed to detect and alert on abnormal behavior and potential security threats in real-time. It is a kernel monitoring and detection agent that observes events like syscalls based on custom rules, integrates metadata from container runtimes and Kubernetes, and allows analysis of collected events in SIEM or data lake systems. Originally created by Sysdig, Falco is a CNCF graduated project used in production by various organizations.

FEATURES

ALTERNATIVES

API Security is a comprehensive solution that provides continuous discovery, vulnerability assessment, threat detection, compliance monitoring, dynamic testing, and remediation capabilities to protect APIs against various threats and vulnerabilities.

A webshell manager via terminal for controlling web servers running PHP or MySQL.

An ASPM platform that provides software supply chain security through risk assessment, prioritization, and protection mechanisms.

SAST and malware analysis tool for Android APKs with detailed scan information.

Orchestration toolchain for scanning source code and infrastructure IaC against security risks.

Security design review automation tool that scans design documents and provides security requirements to development teams during the planning phase.

A simple Swagger-ui scanner that detects old versions vulnerable to various XSS attacks

Yara Based Detection for web browsers