Production Kubernetes operator for deploying and validating MCP servers

FLASH userspace library for chaining co-located AF_XDP network applications

Scan A2A agents for potential threats and security issues

A cargo-generate template for Go and Rust eBPF Projects using Aya and Cilium

A method of defending against SLOW GET, POST, & READ attacks implemented through eBPF using CO-RE and libbpf.

A time-series database for high-performance real-time analytics packaged as a Postgres extension

Cybersecurity AI (CAI), the framework for AI Security

DNS filtering with eBPF

Intellij IDE plugin for development with AI pair-programmer

XDPBroker: A High-Performance XDP/eBPF Packet Broker for Flow-Based Distribution of VXLAN-Encapsulated Traffic for Network Analysis

What are the principles we can use to build LLM-powered software that is actually good enough to put in the hands of production customers?

Standards for building agents, better

A nostalgic terminal Snake game powered by eBPF 🐝

Examples of how to verify a signature using GitHub's public keys.

A Kubernetes operator that logs and forwards all HTTP requests over TCP/IPv4 using an eBPF program to intercept traffic.

OpenFGA SDK for Go

XDR with eBPF-powered firewall and proxy. Protect your Linux servers.

Golang library for SPIFFE support

BPFire development tree

Ingress node firewall implements Kubernetes operator to provision stateless ingress node level firewall rules, stateless ingress node firewall implementation is done using eBPF XDP kernel plugin

eBPF made simple - 🤓 Learn or Die 💀

A top-like tool for monitoring USB traffic using eBPF, inspired by usbtop.

MCP Snitch is a macOS application that intercepts and monitors MCP server communications, providing security analysis, access control, and audit logging for AI tool usage.

The Earthworm project is designed to monitor the heartbeat signals of Kubernetes clusters using eBPF (Extended Berkeley Packet Filter) technology.

bpflog is a tiny Go library and example that logs messages from an eBPF program to userspace using a perf ring buffer.

Run tasks concurrently with limits

WebAssembly for Proxies (Rust SDK)

Pomerium is an identity and context-aware access proxy.