Falco Community Survey 2023

TLDR; Falco users prefer deploying on AWS and adopting it for security threat detection, auditing and compliance, and sandbox testing. Security and DevOps teams are the most common users of Falco. The official Helm chart and official …

The 2023 Falco Security Audit

We are happy to announce that in early 2023 the Falco project completed a security audit sponsored by the CNCF, with support from the Open Source Technology Improvement Fund and conducted by the security experts at Quarkslab SAS. The audit …

Forward Falco events to AWS Security Lake

Last November at re:Invent (2022) AWS introduced the new security oriented data lake: Amazon Security Lake. The AWS team leading the development of the new service contacted the Falco community and proposed a collaboration to develop the …

Falcoctl: install and manage your rules and plugins

Since the launch of the plugin framework in January 2022, our adopters have requested an out-of-the-box solution to manage the lifecycle of rules (installation, updates). We heard your request and also created a guide to help you smoothly …

Falco 0.34.1

Today we announce the release of Falco 0.34.1 🦅! Novelties 🆕 and Fixes Here's a minor update! This patch release addresses small but persistent issues that have been causing inconvenience for users: http_output not working as expected when …

Rule basics for the Falco 3.0.0 Helm chart

The new Falco Helm chart 3.0.0 (full documentation, upgrade information) comes with a new way to automatically update the Falco rules that are currently loaded. Of course, you can enable, disable and configure this functionality to your …

Falco 0.34.0 a.k.a. "The Honeybee 🍯"

Dear community, today we are delighted to announce the release of Falco 0.34.0 🎉! A big thank you to the community for helping get the latest release out. The Falco community is thrilled about this release and cannot wait to share the …

The GPG key used to sign Falco packages has been rotated

The Falcosecurity organization uses a GPG key for providing detatched signatures for the official Falco packages available at download.falco.org/?prefix=packages. After the security incident of CircleCI disclosed in January 2023, the Falco …

Falcosidekick 2.27.0 and Falcosidekick-UI 2.1.0

So many good things happened for Falcosidekick and Falcosidekick UI this year. It's still incredible these projects became so beloved and useful for the community. To all contributors, promotors and users, a big big thank you. The new year …