About
What is Falco? Learn about Falco and how it works Why choose Falco? Benefits of Falco for runtime security Falco use cases Threat detection and regulatory compliance Case studies Discover how the industry is adopting Falco Falco ecosystem Integrations and plugins FAQ The most common questions about the whole Falco
ecosystem
Docs
Blog
Community
About the community For users and contributors Events Meet and learn about Falco Contributors The people who build Falco Roadmap The Project direction Falco brand Brand guidelines
Enterprise
Versions
v0.41 v0.40 v0.39 v0.38 v0.37 v0.36 v0.35 v0.34 v0.33 v0.32 v0.31 v0.30 v0.29 v0.28 v0.27 v0.26

About

Docs

Blog

Community

Enterprise

The Falco Project

Reference

Quick access to Falco customization options, default rules, supported fields and much more

Glossary

A standardized list of Falco terminology

Falco Daemon

Command line arguments and configuration options for Falco

Falco Rules

Default rules and macros, supported events, rule fields and examples

Falco Plugins

Extend Falco functionality using Plugins for Falco libraries/Falco daemon

Changelog

List of changes throughout Falco versions

Last modified Sep 11, 2024: docs(content/docs): section re-ordering (6cdfdb8)

About Docs Blog Community Enterprise

Falco was created by Sysdig

© 2025 The Falco Authors | Documentation Distributed under CC BY 4.0
© 2025 The Linux Foundation ®. All Rights Reserved
The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our Trademark Usage page. Privacy Policy and Terms of Use.