tetragon

arm64/aarch64 port of V4bel/dirtyfrag (CVE-2026-43284). ESP-only - rxrpc path kernel-oopses on arm64 due to flush_dcache_page

Implementing a Zero Trust network and runtime security model on Kubernetes with Cilium, Tetragon, Hubble, and L7 policies, and eBPF-powered detection.

a gRPC client for tetragon

Run an LLM agent like a production workload — isolated, mediated, and fully accounted for.

Tetragon Playground

Open-source distributed security control plane for asynchronous telemetry, cross-application threat correlation, deterministic detection, and cryptographically authenticated containment.

POCs and Tetragon Rules for CVE-2024-21626 and CVE-2025-31133

Intrusion detection via behavioural graphs — eBPF tracing on Kubernetes (Tetragon DaemonSet), syscalls turned into behavioural graphs, Python analysis engine, red-team scenarios for validation.

ArgoCD app-of-apps definitions for operators, security, observability, and AI workloads

Intent-aware runtime detection and adaptive containment for AI agents on Kubernetes using eBPF and Tetragon

A 2-dimensional geometric roguelike shooter about fighting polygons and circles.

Risk-tiered automated containment and rollback from breach detection to eBPF isolation.

Real-time Kubernetes security monitoring with Tetragon, Kyverno, Prometheus & Grafana

Offline, deterministic runtime-behavior analysis & attack-chain detection for Linux. eBPF/Tetragon event correlation with transparent scoring and a 4-tier evaluation.

Sock Shop microservices deployed on AWS EKS. Terraform infrastructure, Kubernetes manifests, and Tetragon runtime security.

K8s security detection pipeline: Falco · Tetragon · Fluent Bit · Sigma · Elastic SIEM

Causal Validation Module for Cilium Tetragon. Anchors kernel-level process events to hardware-verified intent via eBPF/LSM hooks.

This game was heavily inspired by "n-gon", by Ross Landgreen. (