Repositories list

• falco-talon

  Public
  Response Engine for managing threats in your Kubernetes

  kubernetessecurityfalco+ 1

  kubernetessecurityfalcoresponse-engine

  Go

  •

  Apache License 2.0

  •1919 forks•207207 stars•11 issue•99 pull requests•Updated Jul 7, 2026Jul 7, 2026

• falco

  Public
  Cloud Native Runtime Security

  kubernetessecuritycontainers+ 7

  kubernetessecuritycontainerscncfcloud-nativeebpfhacktoberfestfalcoruntime-securitycncf-project

  C++

  •

  Apache License 2.0

  •1k1k forks•9.1k9.1k stars•4646 issues•2626 pull requests•Updated Jul 7, 2026Jul 7, 2026

• falco-operator

  Public
  Kubernetes Operator for Falco

  Go

  •

  Apache License 2.0

  •66 forks•3939 stars•77 issues•11 pull request•Updated Jul 7, 2026Jul 7, 2026

• evolution

  Public
  Evolution process of The Falco Project

  kubernetesdeploymentexamples+ 3

  kubernetesdeploymentexamplesk8sadoptionfalco

  Go

  •

  Apache License 2.0

  •4848 forks•6262 stars•55 issues•11 pull request•Updated Jul 7, 2026Jul 7, 2026

• plugins

  Public
  Falco plugins registry

  pluginregistryfalco+ 1

  pluginregistryfalcofalco-plugins

  Go

  •

  Apache License 2.0

  •109109 forks•117117 stars•88 issues•1212 pull requests•Updated Jul 7, 2026Jul 7, 2026

• libs

  Public
  libsinsp, libscap, the kernel module driver, and the eBPF driver sources

  kmodebpflibsinsp+ 2

  kmodebpflibsinspfalco-driverslibscap

  C

  •

  Apache License 2.0

  •194194 forks•312312 stars•2727 issues•1717 pull requests•Updated Jul 7, 2026Jul 7, 2026

• charts

  Public
  Community managed Helm charts for running Falco with Kubernetes

  Go

  •

  Apache License 2.0

  •319319 forks•293293 stars•66 issues•22 pull requests•Updated Jul 7, 2026Jul 7, 2026

• test-infra

  Public
  Falco workflow & testing infrastructure

  automationbotsci+ 8

  automationbotscicdgovernanceprowtesting-infrastructureprow-jobsfalco-prowfalco-drivers+ 1

  Shell

  •

  Apache License 2.0

  •110110 forks•3333 stars•22 issues•22 pull requests•Updated Jul 7, 2026Jul 7, 2026

• falcosidekick

  Public
  Connect Falco to your ecosystem

  dockerkubernetessecurity+ 4

  dockerkubernetessecurityhacktoberfestfalcofalco-eventresponse-engine

  Go

  •

  Apache License 2.0

  •215215 forks•675675 stars•99 issues•1111 pull requests•Updated Jul 6, 2026Jul 6, 2026

• prempti

  Public
  Falco-powered policy and visibility layer for AI coding agents

  Rust

  •

  Apache License 2.0

  •2323 forks•174174 stars•55 issues•22 pull requests•Updated Jul 6, 2026Jul 6, 2026

• falcoctl

  Public
  Administrative tooling for Falco

  Go

  •

  Apache License 2.0

  •6767 forks•128128 stars•44 issues•66 pull requests•Updated Jul 6, 2026Jul 6, 2026

• rules

  Public
  Falco rule repository

  Go

  •

  Apache License 2.0

  •9393 forks•179179 stars•11 issue•77 pull requests•Updated Jul 6, 2026Jul 6, 2026

• falcosidekick-ui

  Public
  A simple WebUI with latest events from Falco

  Vue

  •

  Apache License 2.0

  •2020 forks•139139 stars•22 issues•1010 pull requests•Updated Jul 6, 2026Jul 6, 2026

• contrib

  Public
  Community sandbox to test-drive ideas/projects/code

  Python

  •

  Apache License 2.0

  •00 forks•00 stars•00 issues•11 pull request•Updated Jul 5, 2026Jul 5, 2026

• driverkit

  Public
  Kit for building Falco drivers: kernel modules or eBPF probes

  Go

  •

  Apache License 2.0

  •5454 forks•7070 stars•00 issues•1010 pull requests•Updated Jul 2, 2026Jul 2, 2026

• k8s-metacollector

  Public
  Fetches the metadata from kubernetes API server and dispatches them to Falco instances

  kubernetesmetadataapi-server+ 1

  kubernetesmetadataapi-serverfalco

  Go

  •

  Apache License 2.0

  •77 forks•2222 stars•11 issue•44 pull requests•Updated Jun 30, 2026Jun 30, 2026

• falco-website

  Public
  Source code of the official Falco website

  securitydocumentationcontainers+ 2

  securitydocumentationcontainerscncfhacktoberfest

  HTML

  •

  Creative Commons Attribution 4.0 International

  •248248 forks•3939 stars•55 issues•66 pull requests•Updated Jun 29, 2026Jun 29, 2026

• event-generator

  Public
  Generate a variety of suspect actions that are detected by Falco rulesets

  gosecuritysyscall+ 2

  gosecuritysyscallsecurity-testingkubernetes-auditing

  Go

  •

  Apache License 2.0

  •4343 forks•121121 stars•11 issue•00 pull requests•Updated Jun 29, 2026Jun 29, 2026

• dbg-go

  Public
  A go tool to work with falcosecurity drivers build grid

  Go

  •

  Apache License 2.0

  •33 forks•33 stars•00 issues•66 pull requests•Updated Jun 29, 2026Jun 29, 2026

• plugin-sdk-go

  Public
  Falco plugins SDK for Go

  gosdkfalco-plugins

  gosdkfalco-plugins

  Go

  •

  Apache License 2.0

  •1818 forks•2626 stars•11 issue•11 pull request•Updated Jun 29, 2026Jun 29, 2026

• deploy-kubernetes

  Public
  Kubernetes deployment resources for Falco

  k8smanifestsfalco+ 4

  k8smanifestsfalcok8s-deploymentfalcosidekickk8s-manifestsfalco-exporter

  Apache License 2.0

  •1616 forks•2020 stars•00 issues•00 pull requests•Updated Jun 22, 2026Jun 22, 2026

• falco-lsp

  Public
  Language Server Protocol and VSCode Extension for Falco rules

  Go

  •

  Apache License 2.0

  •11 fork•44 stars•11 issue•44 pull requests•Updated Jun 20, 2026Jun 20, 2026

• plugin-sdk-rs

  Public
  Falco plugins SDK for Rust

  Rust

  •

  Apache License 2.0

  •55 forks•1212 stars•00 issues•00 pull requests•Updated Jun 3, 2026Jun 3, 2026

• kernel-crawler

  Public
  A tool to crawl Linux kernel versions

  Python

  •

  Apache License 2.0

  •1616 forks•2424 stars•00 issues•88 pull requests•Updated May 25, 2026May 25, 2026

• community

  Public
  The Falco Project Community

  communityoffice-hourscncf-falco+ 1

  communityoffice-hourscncf-falcofalco-community

  Apache License 2.0

  •2323 forks•5656 stars•00 issues•00 pull requests•Updated May 22, 2026May 22, 2026

• falco-actions

  Public
  Run Falco in a GitHub Actions to detect suspicious behavior in your CI/CD

  Python

  •

  Apache License 2.0

  •1313 forks•5151 stars•22 issues•22 pull requests•Updated May 13, 2026May 13, 2026

• falco-playground

  Public
  Web-application used to validate Falco rules and test against scap file

  wasmhacktoberfest

  wasmhacktoberfest

  TypeScript

  •

  Apache License 2.0

  •1919 forks•2121 stars•11 issue•22 pull requests•Updated May 11, 2026May 11, 2026

• plugin-sdk-cpp

  Public
  Falco plugins SDK for C++

  C++

  •

  Apache License 2.0

  •1313 forks•33 stars•00 issues•00 pull requests•Updated May 7, 2026May 7, 2026

• .github

  Public
  Default community health files

  communitycontributing

  communitycontributing

  1515 forks•55 stars•00 issues•00 pull requests•Updated May 7, 2026May 7, 2026

• testing

  Public
  All-purpose test suite for Falco and its ecosystem

  Go

  •

  Apache License 2.0

  •1212 forks•1212 stars•00 issues•00 pull requests•Updated Apr 15, 2026Apr 15, 2026