Falco

Falco is the only open source graduated CNCF project for runtime security. Falco continuously detects unexpected behavior, configuration changes, intrusions, and data theft in real time across hosts, containers, Kubernetes, and Cloud.