Falco
securityThis item was not updated in last three versions of the Radar. Should it have appeared in one of the more recent editions, there is a good chance it remains pertinent. However, if the item dates back further, its relevance may have diminished and our current evaluation could vary. Regrettably, our capacity to consistently revisit items from past Radar editions is limited.
Assess
Falco is an open source project for intrusion and abnormality detection for Cloud Native platforms such as Kubernetes. It detects abnormal application behavior and sends alerts via Slack, Fluentd, NATS, and more.
We are assessing Falco to add another angle to host based intrusion detection and alerting.