Tag: #falco
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 8 posts
8 posts are tagged #falco; the most recent was published on 2026-06-13.
Often tagged together: #ebpf 4 #kubernetes 4 #sbom 4 #sigstore 4 #tetragon 4
Most read in the last 90 days:
- eBPF Observability 2026 — Pixie / Parca / Cilium Hubble / Tetragon / Beyla / Coroot / Falco Deep Dive
- Container & Kubernetes Security Scanning 2026 Complete Guide - Trivy, Grype, Snyk Container, Anchore, Clair, Falco, Kubescape, Datree, Polaris, Tetragon Deep Dive
- Kubernetes Admission Policies & Security 2026 — Kyverno (CNCF Graduated) / OPA Gatekeeper / VAP (CEL) / Falco / KubeArmor / Tetragon Deep Dive
eBPF Runtime Security — Tetragon, Falco, and BPF LSM
Why runtime security is essential in the era of supply chain attacks and container escapes, and how eBPF answers the call. Covers Falco rule writing, kernel-level blocking with Tetragon TracingPolicy, the principles of B
2026-06-13 · 15 min read #ebpf#security#falco#tetragon#kubernetesContainer & Supply-Chain Security in 2026 — Trivy / Grype / Snyk / Sysdig / Tetragon / Falco / Cosign / Sigstore Deep Dive ♪ Listenable
After the 2024 xz backdoor and the 2025 entry into force of the EU Cyber Resilience Act, container supply-chain security is no longer "scan and forget". This is a May 2026 map of the full stack — Trivy/Grype/Snyk/Sysdig
2026-05-25 · 26 min read #container-security#trivy#grype#snyk#sysdigKubernetes Admission Policies & Security 2026 — Kyverno (CNCF Graduated) / OPA Gatekeeper / VAP (CEL) / Falco / KubeArmor / Tetragon Deep Dive ♪ Listenable
The full topology of Kubernetes security in 2026. Kyverno that became CNCF Graduated in November 2024, Rego-based OPA Gatekeeper, the built-in Validating Admission Policy that went GA in k8s 1.30 (CEL), the alpha Mutatin
2026-05-16 · 24 min read #kubernetes#security#admission-controller#kyverno#opa-gatekeeperContainer & Kubernetes Security Scanning 2026 Complete Guide - Trivy, Grype, Snyk Container, Anchore, Clair, Falco, Kubescape, Datree, Polaris, Tetragon Deep Dive ♪ Listenable
A complete map of the container and Kubernetes security scanning ecosystem as of May 2026. Covers image vulnerability scanners (Trivy 0.58, Grype, Syft, Clair v4, Snyk Container), eBPF runtime security (Falco, Tetragon,
2026-05-16 · 23 min read #english#container-security#kubernetes-security#trivy#grypeCloud Security 2026 Complete Guide - Zero Trust, SBOM/SLSA, CSPM/CNAPP, Wiz, Falco, Sigstore, Vault, Tailscale, Cloudflare Deep Dive ♪ Listenable
A complete look at the cloud security stack as of May 2026. Zero Trust (Cloudflare, Tailscale, Zscaler, Netskope), CSPM/CNAPP (Wiz, Orca, Lacework, Prisma Cloud, Sysdig, Aqua), SBOM/SLSA supply chain (Sigstore cosign, Cy
2026-05-16 · 22 min read #cloud-security#zero-trust#sbom#slsa#cspmeBPF Observability 2026 — Pixie / Parca / Cilium Hubble / Tetragon / Beyla / Coroot / Falco Deep Dive ♪ Listenable
A complete map of the eBPF ecosystem as of 2026. Compares Pixie, Parca, Cilium Hubble, Tetragon, BCC/bpftrace, OpenTelemetry eBPF Collector, Grafana Beyla, Coroot, Inspektor Gadget, Kepler and Falco — plus the CO-RE revo
2026-05-15 · 24 min read #ebpf#observability#pixie#parca#ciliumeBPF Complete Guide 2025: Kernel Programming Revolution for Observability, Networking, Security
Everything about eBPF! Safe Linux kernel programming, BCC vs libbpf vs bpftrace, Cilium (networking), Falco (security), Pixie (observability), Tetragon, CO-RE, real-world tracing, performance optimization, production cas
2026-04-14 · 11 min read #ebpf#kernel#observability#networking#securityContainer Security & Supply Chain Complete Guide 2025: Image Scanning, Sigstore, SBOM, Runtime Security
Everything about container security! Image scanning (Trivy/Grype/Snyk), image signing (Sigstore/cosign), SBOM (CycloneDX/SPDX), runtime security (Falco/Tetragon), Pod Security Standards, Network Policy, Seccomp/AppArmor,
2026-04-14 · 15 min read #container-security#supply-chain#image-scanning#sigstore#sbom