Restructuring the Kubernetes Threat Matrix and Evaluating Attack Detection by Falco

I’m Hiroki Akamatsu (@hi120ki), an intern on Mercari’s Security Engineering Team. During my internship, I worked on the re-evaluation of Falco, runtime security monitoring tools for Kubernetes. This article presents the following findings …

Falco applies for graduation

Dear Falco community, The Falco project is excited to announce that on Nov 4, 2022, the project maintainers submitted the PR to be considered for graduation. This milestone is important because it demonstrates the health and maturity of the …

Falco at the KubeCon NA 2022

It was KubeCon recently. I doubt anyone reading this didn't know about it. And if you attended, you're probably still receiving e-mails about the event. KubeCon is where everyone wants to be. And Falco was there too. It did indeed have a …

Using Falco to Protect GitHub

If you are reading this, your source code is likely your most important asset: not only it is at the base of the applications that power your business, but if you operate in the cloud, it’s also likely how you define and control your …

Falco 0.33.0 a.k.a. "the pumpkin release 🎃"

Dear community, today we are happy to announce the release of Falco 0.33.0 🎉! A big thank you to the community for helping get the latest release over the finish line. The Falco community rallied behind this release and we wanted to share …

Running Falco on Apple Silicon

Hello, Falcoers! Do you want to run Falco on Apple ARM M1 CPUs? Since Falco 0.32.1, you can! It requires a Linux virtual machine (VM) since Falco doesn't run on OSX, but it is pretty straightforward. Let's go step by step: Setting up the …

Getting started with gVisor support in Falco

This post has been updated in December 2022 after initial publication. It now contains up-to-date instructions about how to use gVisor support on Docker and Kubernetes with GKE as well! The recommended version for gVisor support is now …

Falco Driverkit with Docker on Debian

We use different technologies on a daily basis. Tools like Vagrant, Terraform, Ansible, and many more allow us to create and destroy digital resources in a matter of minutes, if not seconds. However, if you keep changing your running …

Updating Falco’s governance documentation

As a CNCF project, Falco is committed to promoting a healthy community of contributors and maintainers from multiple vendors. In aid of this, we are delighted to announce that we have updated the Falco governance documentation to help our …