Skip to content
@falcosecurity

Falco

Falco is Container Native Runtime Security

Pinned Loading

  1. falco falco Public

    Cloud Native Runtime Security

    C++ 8.7k 983

  2. plugins plugins Public

    Falco plugins registry

    Go 113 102

  3. falcosidekick falcosidekick Public

    Connect Falco to your ecosystem

    Go 647 198

  4. charts charts Public

    Community managed Helm charts for running Falco with Kubernetes

    Go 285 319

  5. community community Public

    The Falco Project Community

    55 23

  6. evolution evolution Public

    Evolution process of The Falco Project

    Go 59 47

Repositories

Showing 10 of 50 repositories
  • plugin-sdk-cpp Public

    Falco plugins SDK for C++

    falcosecurity/plugin-sdk-cpp’s past year of commit activity
    C++ 3 Apache-2.0 12 1 0 Updated Feb 12, 2026
  • rules Public

    Falco rule repository

    falcosecurity/rules’s past year of commit activity
    Go 153 Apache-2.0 85 3 (1 issue needs help) 13 Updated Feb 12, 2026
  • plugins Public

    Falco plugins registry

    falcosecurity/plugins’s past year of commit activity
    Go 113 Apache-2.0 102 11 (2 issues need help) 12 Updated Feb 12, 2026
  • event-generator Public

    Generate a variety of suspect actions that are detected by Falco rulesets

    falcosecurity/event-generator’s past year of commit activity
    Go 115 Apache-2.0 42 1 1 Updated Feb 12, 2026
  • falco Public

    Cloud Native Runtime Security

    falcosecurity/falco’s past year of commit activity
    C++ 8,653 Apache-2.0 983 56 (5 issues need help) 10 Updated Feb 12, 2026
  • evolution Public

    Evolution process of The Falco Project

    falcosecurity/evolution’s past year of commit activity
    Go 59 Apache-2.0 47 6 (2 issues need help) 1 Updated Feb 12, 2026
  • test-infra Public

    Falco workflow & testing infrastructure

    falcosecurity/test-infra’s past year of commit activity
    HCL 31 Apache-2.0 111 1 1 Updated Feb 12, 2026
  • k8s-metacollector Public

    Fetches the metadata from kubernetes API server and dispatches them to Falco instances

    falcosecurity/k8s-metacollector’s past year of commit activity
    Go 21 Apache-2.0 6 0 16 Updated Feb 12, 2026
  • libs Public

    libsinsp, libscap, the kernel module driver, and the eBPF driver sources

    falcosecurity/libs’s past year of commit activity
    C 301 Apache-2.0 177 34 (4 issues need help) 16 Updated Feb 11, 2026
  • kernel-testing Public

    Ansible playbooks to provision firecracker VMs and run Falco kernel tests

    falcosecurity/kernel-testing’s past year of commit activity
    Dockerfile 14 Apache-2.0 6 0 2 Updated Feb 9, 2026