You’ve just been alerted about a new exploit, but you’re unsure how to know if your organization is exposed. Where can you turn for help? This is where Falco comes in. Falco is a CNCF project…

Addressing community challenges and feedback is a big part of working on open source projects. In response to our recent community survey, the 0.35 release delivers improved performance, new metrics, image signing, and other great goodies….

Despite working for different areas, Prometheus – an open source event monitoring and alerting tool – and Falco – an open source runtime threat detection tool – complement each other to build a reliable monitoring and…

If you’ve been in the cloud native community, chances are you’ve heard the term ‘ctl’ (pronounced cuttle or c-t-l). Just as Kubectl allows you to run commands against Kubernetes clusters, Falcoctl is a command line tool…

gVisor is an application kernel that provides an additional layer of isolation between running applications and the host operating system. This extra layer greatly improves the security of workloads, but can impede container visibility. Discover how…

Project post originally published on the Falco blog by Luca Guerra, Lorenzo Susini, Vicente J. Jiménez Miras In version 0.32.1, Falco first introduced support for gVisor. So, what is it and how can we use it? gVisor, quoting the official…

Falco is the de facto Runtime Security agent for Kubernetes environments, by capturing syscalls it can see everything at Kernel level. With its’ new Plugin system, you can now apply the logic of rules to any…