Tools
cilium
cilium/cilium
An eBPF-based networking, security, and observability platform for Kubernetes, providing CNI networking, load balancing, and identity-aware network policies.
Topics
Related projects
tetragon5.1kTetragon is Cilium's eBPF-based security observability and runtime enforcement component. It captures process, syscall and I/O events in real time and applies Kubernetes-aware detection and enforcement policies.
KubeArmor2.6kA cloud-native runtime security enforcement system that uses AppArmor, SELinux or BPF-LSM to restrict process, file and network behavior of pods, containers and nodes.
falco9.6kFalco is a CNCF cloud-native runtime security tool that monitors kernel and container events against custom rules to detect and alert on threats in real time.
tracee4.7kTracee is an open-source Linux runtime security and forensics tool from Aqua Security. Using eBPF, it collects system events and detects suspicious behavior, with Docker and Kubernetes deployment for runtime threat detection.
dockle3.3kDockle is a container image linter that audits Docker images against CIS benchmarks and best practices, reporting FATAL, WARN, and INFO findings with remediation guidance for secure image builds.
ContainerSSH3.1kContainerSSH is an SSH server that launches a fresh container for each login, with pluggable authentication and configuration webhooks, Docker/Kubernetes backends and audit logging for labs, debugging access and honeypots.