Falco is a cloud native runtime security tool for Linux operating systems designed to detect and alert on abnormal behavior and potential security threats in real-time. It is a kernel monitoring and detection agent that observes events like syscalls based on custom rules, integrates metadata from container runtimes and Kubernetes, and allows analysis of collected events in SIEM or data lake systems. Originally created by Sysdig, Falco is a CNCF graduated project used in production by various organizations.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A brute-force protection middleware for express routes that rate-limits incoming requests.
A security-focused general purpose memory allocator providing the malloc API with hardening against heap corruption vulnerabilities.
A web application security testing platform that helps you test your knowledge on web application security through realistic scenarios with known vulnerabilities.
Static application security testing (SAST) tool for scanning source code against security and privacy risks.
Search engine for open-source Git repositories with advanced features like case sensitivity and regular expressions.
A PHP port of Rack::Honeypot, a spam trap that detects and blocks spambots
QIRA is a competitor to strace and gdb with MIT license, supporting Ubuntu and Docker for wider compatibility.
A source code search engine for searching alphanumeric snippets, signatures, or keywords in web page HTML, JS, and CSS code.
A tool for detecting capabilities in executable files, providing insights into a program's behavior and potential malicious activities.
PINNED

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.