Repositories list

• test-infra

  Public
  Falco workflow & testing infrastructure

  automationbotsci+ 8

  automationbotscicdgovernanceprowtesting-infrastructureprow-jobsfalco-prowfalco-drivers+ 1

  HCL

  •

  Apache License 2.0

  •112112 forks•3333 stars•11 issue•33 pull requests•Updated May 9, 2026May 9, 2026

• falcoctl

  Public
  Administrative tooling for Falco

  Go

  •

  Apache License 2.0

  •6767 forks•126126 stars•33 issues•33 pull requests•Updated May 9, 2026May 9, 2026

• falco-operator

  Public
  Kubernetes Operator for Falco

  Go

  •

  Apache License 2.0

  •88 forks•2828 stars•77 issues•11 pull request•Updated May 8, 2026May 8, 2026

• libs

  Public
  libsinsp, libscap, the kernel module driver, and the eBPF driver sources

  kmodebpflibsinsp+ 2

  kmodebpflibsinspfalco-driverslibscap

  C

  •

  Apache License 2.0

  •185185 forks•305305 stars•2424 issues•1414 pull requests•Updated May 8, 2026May 8, 2026

• event-generator

  Public
  Generate a variety of suspect actions that are detected by Falco rulesets

  gosecuritysyscall+ 2

  gosecuritysyscallsecurity-testingkubernetes-auditing

  Go

  •

  Apache License 2.0

  •4242 forks•119119 stars•11 issue•11 pull request•Updated May 8, 2026May 8, 2026

• rules

  Public
  Falco rule repository

  Go

  •

  Apache License 2.0

  •9090 forks•165165 stars•22 issues•55 pull requests•Updated May 8, 2026May 8, 2026

• evolution

  Public
  Evolution process of The Falco Project

  kubernetesdeploymentexamples+ 3

  kubernetesdeploymentexamplesk8sadoptionfalco

  Go

  •

  Apache License 2.0

  •4848 forks•6161 stars•44 issues•11 pull request•Updated May 8, 2026May 8, 2026

• charts

  Public
  Community managed Helm charts for running Falco with Kubernetes

  Go

  •

  Apache License 2.0

  •318318 forks•290290 stars•1010 issues•44 pull requests•Updated May 8, 2026May 8, 2026

• k8s-metacollector

  Public
  Fetches the metadata from kubernetes API server and dispatches them to Falco instances

  kubernetesmetadataapi-server+ 1

  kubernetesmetadataapi-serverfalco

  Go

  •

  Apache License 2.0

  •66 forks•2121 stars•11 issue•00 pull requests•Updated May 7, 2026May 7, 2026

• falco

  Public
  Cloud Native Runtime Security

  kubernetessecuritycontainers+ 7

  kubernetessecuritycontainerscncfcloud-nativeebpfhacktoberfestfalcoruntime-securitycncf-project

  C++

  •

  Apache License 2.0

  •1k1k forks•8.9k8.9k stars•3737 issues•1111 pull requests•Updated May 7, 2026May 7, 2026

• driverkit

  Public
  Kit for building Falco drivers: kernel modules or eBPF probes

  Go

  •

  Apache License 2.0

  •5454 forks•6969 stars•00 issues•33 pull requests•Updated May 7, 2026May 7, 2026

• falco-website

  Public
  Source code of the official Falco website

  securitydocumentationcontainers+ 2

  securitydocumentationcontainerscncfhacktoberfest

  HTML

  •

  Creative Commons Attribution 4.0 International

  •248248 forks•3939 stars•66 issues•44 pull requests•Updated May 7, 2026May 7, 2026

• plugin-sdk-cpp

  Public
  Falco plugins SDK for C++

  C++

  •

  Apache License 2.0

  •1313 forks•33 stars•00 issues•00 pull requests•Updated May 7, 2026May 7, 2026

• prempti

  Public
  Falco-powered policy and visibility layer for AI coding agents

  Rust

  •

  Apache License 2.0

  •55 forks•1414 stars•00 issues•22 pull requests•Updated May 7, 2026May 7, 2026

• plugin-sdk-rs

  Public
  Falco plugins SDK for Rust

  Rust

  •

  Apache License 2.0

  •55 forks•1212 stars•00 issues•11 pull request•Updated May 7, 2026May 7, 2026

• falcosidekick

  Public
  Connect Falco to your ecosystem

  dockerkubernetessecurity+ 4

  dockerkubernetessecurityhacktoberfestfalcofalco-eventresponse-engine

  Go

  •

  Apache License 2.0

  •209209 forks•665665 stars•66 issues•2121 pull requests•Updated May 7, 2026May 7, 2026

• plugins

  Public
  Falco plugins registry

  pluginregistryfalco+ 1

  pluginregistryfalcofalco-plugins

  Go

  •

  Apache License 2.0

  •110110 forks•114114 stars•66 issues•88 pull requests•Updated May 7, 2026May 7, 2026

• .github

  Public
  Default community health files

  communitycontributing

  communitycontributing

  1515 forks•55 stars•00 issues•00 pull requests•Updated May 7, 2026May 7, 2026

• deploy-kubernetes

  Public
  Kubernetes deployment resources for Falco

  k8smanifestsfalco+ 4

  k8smanifestsfalcok8s-deploymentfalcosidekickk8s-manifestsfalco-exporter

  Apache License 2.0

  •1616 forks•1818 stars•00 issues•00 pull requests•Updated May 7, 2026May 7, 2026

• falcosidekick-ui

  Public
  A simple WebUI with latest events from Falco

  Vue

  •

  Apache License 2.0

  •2020 forks•137137 stars•22 issues•99 pull requests•Updated May 7, 2026May 7, 2026

• falco-lsp

  Public
  Language Server Protocol and VSCode Extension for Falco rules

  Go

  •

  Apache License 2.0

  •11 fork•44 stars•00 issues•00 pull requests•Updated May 6, 2026May 6, 2026

• falco-talon

  Public
  Response Engine for managing threats in your Kubernetes

  kubernetessecurityfalco+ 1

  kubernetessecurityfalcoresponse-engine

  Go

  •

  Apache License 2.0

  •1818 forks•197197 stars•11 issue•88 pull requests•Updated Apr 28, 2026Apr 28, 2026

• dbg-go

  Public
  A go tool to work with falcosecurity drivers build grid

  Go

  •

  Apache License 2.0

  •33 forks•33 stars•00 issues•55 pull requests•Updated Apr 27, 2026Apr 27, 2026

• testing

  Public
  All-purpose test suite for Falco and its ecosystem

  Go

  •

  Apache License 2.0

  •1212 forks•1212 stars•00 issues•00 pull requests•Updated Apr 15, 2026Apr 15, 2026

• syscalls-bumper

  Public
  A tool to automatically update supported syscalls in libs

  Go

  •

  Apache License 2.0

  •44 forks•55 stars•00 issues•55 pull requests•Updated Apr 13, 2026Apr 13, 2026

• kernel-crawler

  Public
  A tool to crawl Linux kernel versions

  Python

  •

  Apache License 2.0

  •1616 forks•2525 stars•00 issues•88 pull requests•Updated Apr 13, 2026Apr 13, 2026

• contrib

  Public
  Community sandbox to test-drive ideas/projects/code

  Python

  •

  Apache License 2.0

  •00 forks•00 stars•00 issues•22 pull requests•Updated Mar 26, 2026Mar 26, 2026

• falco-actions

  Public
  Run Falco in a GitHub Actions to detect suspicious behavior in your CI/CD

  Python

  •

  Apache License 2.0

  •1212 forks•4949 stars•22 issues•22 pull requests•Updated Mar 26, 2026Mar 26, 2026

• client-go

  Public archive
  Go client and SDK for Falco

  gogolangclient+ 2

  gogolangclientgrpcfalco

  Go

  •

  Apache License 2.0

  •1919 forks•5555 stars•00 issues•11 pull request•Updated Mar 18, 2026Mar 18, 2026

• kernel-testing

  Public
  Ansible playbooks to provision firecracker VMs and run Falco kernel tests

  ansiblekerneltests+ 5

  ansiblekerneltestsebpfignitefalcoruntime-securityfirecracker

  Dockerfile

  •

  Apache License 2.0

  •66 forks•1414 stars•00 issues•33 pull requests•Updated Mar 2, 2026Mar 2, 2026