Falco

Runtime security — detect threats in containers and hosts

🐧 Linux🍎 Mac🪟 Windows

Reviewed: 2026-06|Tested on: Kubernetes 1.29 · Terraform 1.8 · Ubuntu 22.04

What is this?

Falco detects suspicious activity in running containers and Linux hosts.

📥

Step 01

Install Falco

(01)Install Falco

Linux

1curl -s https://falco.org/repo/falcosecurity-3672BA8F.asc | sudo apt-key add -
2echo "deb https://download.falco.org/packages/deb stable main" | sudo tee /etc/apt/sources.list.d/falcosecurity.list
3sudo apt-get update && sudo apt-get install -y falco

✅

Step 02

Verify

(01)Verify installation

Linux

1sudo systemctl start falco
2sudo falco --list