Repositories list

• evolution

  Public

  falcosecurity/evolution’s past year of commit activity
  Evolution process of The Falco Project

  kubernetesdeploymentexamples+ 3k8sadoptionfalco

  Go

  •

  Apache License 2.0

  •47•59•5•1•Updated Feb 8, 2026Feb 8, 2026

• test-infra

  Public

  falcosecurity/test-infra’s past year of commit activity
  Falco workflow & testing infrastructure

  automationbotsci+ 8cdgovernanceprowtesting-infrastructureprow-jobsfalco-prowfalco-drivers+ 1

  HCL

  •

  Apache License 2.0

  •111•31•1•1•Updated Feb 8, 2026Feb 8, 2026

• falco-operator

  Public

  falcosecurity/falco-operator’s past year of commit activity
  Kubernetes Operator for Falco

  Go

  •

  Apache License 2.0

  •4•15•6•1•Updated Feb 6, 2026Feb 6, 2026

• libs

  Public
  libsinsp, libscap, the kernel module driver, and the eBPF driver sources

  kmodebpflibsinsp+ 2falco-driverslibscap

  C

  •

  Apache License 2.0

  •177•301•35•17•Updated Feb 6, 2026Feb 6, 2026

• plugins

  Public
  Falco plugins registry

  pluginregistryfalco+ 1falco-plugins

  Go

  •

  Apache License 2.0

  •102•113•12•9•Updated Feb 6, 2026Feb 6, 2026

• driverkit

  Public
  Kit for building Falco drivers: kernel modules or eBPF probes

  Go

  •

  Apache License 2.0

  •53•69•0•2•Updated Feb 6, 2026Feb 6, 2026

• falcoctl

  Public

  falcosecurity/falcoctl’s past year of commit activity
  Administrative tooling for Falco

  Go

  •

  Apache License 2.0

  •65•121•2•2•Updated Feb 6, 2026Feb 6, 2026

• k8s-metacollector

  Public

  falcosecurity/k8s-metacollector’s past year of commit activity
  Fetches the metadata from kubernetes API server and dispatches them to Falco instances

  kubernetesmetadataapi-server+ 1falco

  Go

  •

  Apache License 2.0

  •6•21•0•6•Updated Feb 5, 2026Feb 5, 2026

• contrib

  Public

  falcosecurity/contrib’s past year of commit activity
  Community sandbox to test-drive ideas/projects/code

  Python

  •

  Apache License 2.0

  •0•0•0•1•Updated Feb 5, 2026Feb 5, 2026

• falco

  Public
  Cloud Native Runtime Security

  kubernetessecuritycontainers+ 7cncfcloud-nativeebpfhacktoberfestfalcoruntime-securitycncf-project

  C++

  •

  Apache License 2.0

  •982•8.6k•57•10•Updated Feb 5, 2026Feb 5, 2026

• testing

  Public

  falcosecurity/testing’s past year of commit activity
  All-purpose test suite for Falco and its ecosystem

  Go

  •

  Apache License 2.0

  •12•12•0•0•Updated Feb 5, 2026Feb 5, 2026

• rules

  Public
  Falco rule repository

  Go

  •

  Apache License 2.0

  •85•153•3•16•Updated Feb 5, 2026Feb 5, 2026

• kernel-testing

  Public
  Ansible playbooks to provision firecracker VMs and run Falco kernel tests

  ansiblekerneltests+ 5ebpfignitefalcoruntime-securityfirecracker

  Dockerfile

  •

  Apache License 2.0

  •6•14•0•2•Updated Feb 4, 2026Feb 4, 2026

• falco-website

  Public
  Source code of the official Falco website

  securitydocumentationcontainers+ 2cncfhacktoberfest

  HTML

  •

  Creative Commons Attribution 4.0 International

  •245•39•10•4•Updated Feb 4, 2026Feb 4, 2026

• falco-actions

  Public

  falcosecurity/falco-actions’s past year of commit activity
  Run Falco in a GitHub Actions to detect suspicious behavior in your CI/CD

  Python

  •

  Apache License 2.0

  •12•45•1•1•Updated Feb 3, 2026Feb 3, 2026

• falcosidekick

  Public

  falcosecurity/falcosidekick’s past year of commit activity
  Connect Falco to your ecosystem

  dockerkubernetessecurity+ 4hacktoberfestfalcofalco-eventresponse-engine

  Go

  •

  Apache License 2.0

  •199•647•7•11•Updated Feb 2, 2026Feb 2, 2026

• kernel-crawler

  Public

  falcosecurity/kernel-crawler’s past year of commit activity
  A tool to crawl Linux kernel versions

  Python

  •

  Apache License 2.0

  •15•24•1•3•Updated Feb 2, 2026Feb 2, 2026

• dbg-go

  Public

  falcosecurity/dbg-go’s past year of commit activity
  A go tool to work with falcosecurity drivers build grid

  Go

  •

  Apache License 2.0

  •2•3•0•1•Updated Feb 2, 2026Feb 2, 2026

• deploy-kubernetes

  Public
  Kubernetes deployment resources for Falco

  k8smanifestsfalco+ 4k8s-deploymentfalcosidekickk8s-manifestsfalco-exporter

  Apache License 2.0

  •16•18•0•0•Updated Jan 29, 2026Jan 29, 2026

• charts

  Public
  Community managed Helm charts for running Falco with Kubernetes

  Go

  •

  Apache License 2.0

  •319•285•6•3•Updated Jan 29, 2026Jan 29, 2026

• community

  Public
  The Falco Project Community

  communityoffice-hourscncf-falco+ 1falco-community

  Apache License 2.0

  •23•55•0•0•Updated Jan 29, 2026Jan 29, 2026

• plugin-sdk-go

  Public
  Falco plugins SDK for Go

  gosdkfalco-plugins

  Go

  •

  Apache License 2.0

  •18•26•2•1•Updated Jan 29, 2026Jan 29, 2026

• client-go

  Public
  Go client and SDK for Falco

  gogolangclient+ 2grpcfalco

  Go

  •

  Apache License 2.0

  •19•55•0•0•Updated Jan 19, 2026Jan 19, 2026

• plugin-sdk-cpp

  Public
  Falco plugins SDK for C++

  C++

  •

  Apache License 2.0

  •12•3•1•1•Updated Jan 16, 2026Jan 16, 2026

• plugin-sdk-rs

  Public
  Falco plugins SDK for Rust

  Rust

  •

  Apache License 2.0

  •5•12•0•0•Updated Jan 7, 2026Jan 7, 2026

• syscalls-bumper

  Public
  A tool to automatically update supported syscalls in libs

  Go

  •

  Apache License 2.0

  •4•5•0•0•Updated Dec 17, 2025Dec 17, 2025

• falcosidekick-ui

  Public
  A simple WebUI with latest events from Falco

  Vue

  •

  Apache License 2.0

  •17•135•1•11•Updated Dec 12, 2025Dec 12, 2025

• falco-talon

  Public
  Response Engine for managing threats in your Kubernetes

  kubernetessecurityfalco+ 1response-engine

  Go

  •

  Apache License 2.0

  •15•189•0•6•Updated Nov 20, 2025Nov 20, 2025

• elftoolchain

  Public
  Local version of https://sourceforge.net/projects/elftoolchain/

  C

  •

  Other

  •0•0•0•0•Updated Jun 11, 2025Jun 11, 2025

• cncf-green-review-testing

  Public
  Falco configurations intended for testing with the CNCF Green Reviews Working Group

  Apache License 2.0

  •2•2•0•0•Updated Jun 9, 2025Jun 9, 2025