Tetragon alternatives for AI agents.

eBPF-based Networking, Security, and Observability

Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.

Linux Runtime Security and Forensics using eBPF

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF

Process-aware, eBPF-based tcpdump

Application Kernel for Containers

Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

Hubble - Network, Service & Security Observability for Kubernetes using eBPF

eBPF distributed networking observability tool for Kubernetes

ContainerSSH: Launch containers on demand

Kubernetes networking based on Open vSwitch

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides recommendations to proactively improve security by hardening the environment.

Superseded by https://github.com/aquasecurity/trivy-operator