exein-io/pulsar

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1037 stars · 68 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Pulsar is a modular, eBPF-powered runtime security and observability tool for Linux devices, written in Rust and designed for IoT and edge environments. It collects kernel-level events (processes, file I/O, network, system activity) and evaluates them against user-defined security rules to detect and alert on threats.

Use cases

• monitor runtime activity of embedded linux devices
• detect suspicious file access like symlink to /etc/shadow
• monitor network connections for suspicious activity
• detect process execution and behavior changes on iot devices
• write custom security policies for linux endpoints
• secure containers and servers with eBPF-based monitoring

When to choose

• you need lightweight runtime security on IoT or embedded Linux devices
• you want eBPF-based monitoring without kernel modules or patching
• you need modular, customizable security rules with a human-readable format
• you run Arm, RISC-V, or x86 Linux systems and want unified security observability

When to avoid

• you need runtime security on non-Linux platforms
• your kernel is older than 5.5 or lacks BPF/BTF support
• you need a full SIEM or centralized log management solution rather than a device-level agent

Facets

application · maturity active

monitoring security logging alerting security iot embedded-systems monitoring operating-systems rust embedded iot cli ebpf runtime-security observability rules-engine kernel-monitoring edge-computing linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="exein-io/pulsar")