Kubernetes Security

Falco Security Auditor

Audit low-level kernel activities inside container clusters. Write customized syscall filters, configure PagerDuty hooks, and simulate intrusion warnings.

🛡️ Rule Conditions

Threat Rule Target

Alert Severity

Kubernetes Namespaces

Only trace namespace `production`

Process Scope Context

Enforce container constraint only

Notification Alert Receivers

Slack Webhook integrations PagerDuty triggers Syslog output streaming gRPC Event stream

📝 Custom Exceptions