{"adoption": {"forks": 1065, "observed_at": "2026-08-28T04:10:30.467499+00:00", "stars": 9305}, "canonical_url": "https://ross.abutalabs.com/products/falco", "card": {"archived": false, "artifact_type": "application", "description": "Cloud Native Runtime Security", "domain": ["security", "cloud-computing", "monitoring"], "enriched": true, "function": ["monitoring", "alerting", "security", "logging"], "health_score": 96, "homepage": "https://falco.org", "language": "C++", "license": "Apache-2.0", "license_family": "permissive", "maturity": "stable", "member_repos": ["falcosecurity/falco"], "name": "falcosecurity/falco", "platform": ["self-hosted", "cloud"], "pushed_at": "2026-08-03T07:39:35+00:00", "repo": "falcosecurity/falco", "stars": 9305, "tags": ["runtime-security", "ebpf", "threat-detection", "syscall-monitoring", "cncf", "siem-integration", "kubernetes-security", "intrusion-detection", "containers", "devops", "linux", "kubernetes", "docker"], "topics": ["cncf", "containers", "security", "falco", "ebpf", "kubernetes", "hacktoberfest", "cloud-native", "cncf-project", "runtime-security"], "urls": [], "use_cases": ["detect runtime security threats in containers and kubernetes", "monitor linux syscalls for suspicious behavior", "alert on privilege escalation and shell spawning in production", "detect kubernetes cluster intrusions in real time", "maintain pci dss and mitre att&ck compliance monitoring", "forward security alerts to siem or data lake", "monitor cloud audit logs like aws cloudtrail and okta"], "what_it_is": "Falco is a CNCF-graduated cloud native runtime security tool for Linux that monitors kernel events (syscalls) via eBPF or kernel modules and detects abnormal behavior using customizable rules. It enriches events with container and Kubernetes metadata and delivers real-time alerts that can be forwarded to SIEM and data lake systems.", "when_to_avoid": ["you need endpoint protection on non-Linux systems like Windows or macOS", "you want a full managed SIEM or antivirus product rather than a detection agent", "you cannot run privileged workloads or eBPF/kernel modules on your hosts"], "when_to_choose": ["you run linux hosts, containers, or kubernetes and need real-time runtime threat detection", "you want a lightweight, low-overhead eBPF-based monitoring agent with a single policy language", "you need out-of-the-box rules plus extensibility via plugins and 50+ alert integrations"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/falco", "repo": "falcosecurity/falco", "role": "main", "score": 94}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:10:30.467499+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-29T17:22:31.292949+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "aa2dd3290c6eef67f30d63b1af45cd8ebc00601130dd315984000b2d445f572e", "fetched_at": "2026-08-28T04:10:30.467499+00:00", "kind": "readme", "missing": false, "url": "https://github.com/falcosecurity/falco"}, {"content_hash": "c1326ba2b61935710269bcb68ff7d734268cfa2904447bd88d840d997fb62bce", "fetched_at": "2026-08-29T08:22:41.817950+00:00", "kind": "homepage", "missing": false, "url": "https://falco.org"}, {"content_hash": "4fe5d21fcdfe91fdf1281953af87ff45a78e3353e073e5d8f5269789576c344f", "fetched_at": "2026-08-29T08:22:41.826971+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about"}, {"content_hash": "ad6a04ec20ca17986624044bc66f527844e32cd9b40361208bfc9564c5453ab5", "fetched_at": "2026-08-29T08:22:41.828841+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/why-falco"}, {"content_hash": "8cc1b60a10163a0b3c1c119d0c0c99a46a829c0daf64eeb6affaac35c034d282", "fetched_at": "2026-08-29T08:22:41.830700+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/use-cases"}, {"content_hash": "768e3e22c5060dc87c6dcfef0b15638c356eb5c22357f059de87b4b0ffb86772", "fetched_at": "2026-08-29T08:22:41.832369+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/case-studies"}, {"content_hash": "7c198a7a4b3b0b92798d5d3080f5208041c9eb6d5f7533e164689a9dcf18c056", "fetched_at": "2026-08-29T08:22:41.833817+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/ecosystem"}, {"content_hash": "a0cc3322d127e4a6f1a0ccaadf35a93099b64b2a1c658cb8aac1ded3f3ad60cf", "fetched_at": "2026-08-29T08:22:41.836836+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/faq"}, {"content_hash": "4928517bcfbaee7780ca9d20f2d92083a352f05ba69702bee24301b4c795cec6", "fetched_at": "2026-08-29T08:22:41.839742+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/docs"}, {"content_hash": "949da973beff0dc0fe94afba32232a8753c53d70f2e3cbca68980e82b7086eb3", "fetched_at": "2026-08-29T08:22:41.841668+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/community"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:10:30.467499+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-29T17:22:31.292949+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "aa2dd3290c6eef67f30d63b1af45cd8ebc00601130dd315984000b2d445f572e", "fetched_at": "2026-08-28T04:10:30.467499+00:00", "kind": "readme", "missing": false, "url": "https://github.com/falcosecurity/falco"}, {"content_hash": "c1326ba2b61935710269bcb68ff7d734268cfa2904447bd88d840d997fb62bce", "fetched_at": "2026-08-29T08:22:41.817950+00:00", "kind": "homepage", "missing": false, "url": "https://falco.org"}, {"content_hash": "4fe5d21fcdfe91fdf1281953af87ff45a78e3353e073e5d8f5269789576c344f", "fetched_at": "2026-08-29T08:22:41.826971+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about"}, {"content_hash": "ad6a04ec20ca17986624044bc66f527844e32cd9b40361208bfc9564c5453ab5", "fetched_at": "2026-08-29T08:22:41.828841+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/why-falco"}, {"content_hash": "8cc1b60a10163a0b3c1c119d0c0c99a46a829c0daf64eeb6affaac35c034d282", "fetched_at": "2026-08-29T08:22:41.830700+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/use-cases"}, {"content_hash": "768e3e22c5060dc87c6dcfef0b15638c356eb5c22357f059de87b4b0ffb86772", "fetched_at": "2026-08-29T08:22:41.832369+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/case-studies"}, {"content_hash": "7c198a7a4b3b0b92798d5d3080f5208041c9eb6d5f7533e164689a9dcf18c056", "fetched_at": "2026-08-29T08:22:41.833817+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/ecosystem"}, {"content_hash": "a0cc3322d127e4a6f1a0ccaadf35a93099b64b2a1c658cb8aac1ded3f3ad60cf", "fetched_at": "2026-08-29T08:22:41.836836+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/faq"}, {"content_hash": "4928517bcfbaee7780ca9d20f2d92083a352f05ba69702bee24301b4c795cec6", "fetched_at": "2026-08-29T08:22:41.839742+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/docs"}, {"content_hash": "949da973beff0dc0fe94afba32232a8753c53d70f2e3cbca68980e82b7086eb3", "fetched_at": "2026-08-29T08:22:41.841668+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/community"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-29T17:22:31.292949+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "aa2dd3290c6eef67f30d63b1af45cd8ebc00601130dd315984000b2d445f572e", "fetched_at": "2026-08-28T04:10:30.467499+00:00", "kind": "readme", "missing": false, "url": "https://github.com/falcosecurity/falco"}, {"content_hash": "c1326ba2b61935710269bcb68ff7d734268cfa2904447bd88d840d997fb62bce", "fetched_at": "2026-08-29T08:22:41.817950+00:00", "kind": "homepage", "missing": false, "url": "https://falco.org"}, {"content_hash": "4fe5d21fcdfe91fdf1281953af87ff45a78e3353e073e5d8f5269789576c344f", "fetched_at": "2026-08-29T08:22:41.826971+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about"}, {"content_hash": "ad6a04ec20ca17986624044bc66f527844e32cd9b40361208bfc9564c5453ab5", "fetched_at": "2026-08-29T08:22:41.828841+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/why-falco"}, {"content_hash": "8cc1b60a10163a0b3c1c119d0c0c99a46a829c0daf64eeb6affaac35c034d282", "fetched_at": "2026-08-29T08:22:41.830700+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/use-cases"}, {"content_hash": "768e3e22c5060dc87c6dcfef0b15638c356eb5c22357f059de87b4b0ffb86772", "fetched_at": "2026-08-29T08:22:41.832369+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/case-studies"}, {"content_hash": "7c198a7a4b3b0b92798d5d3080f5208041c9eb6d5f7533e164689a9dcf18c056", "fetched_at": "2026-08-29T08:22:41.833817+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/ecosystem"}, {"content_hash": "a0cc3322d127e4a6f1a0ccaadf35a93099b64b2a1c658cb8aac1ded3f3ad60cf", "fetched_at": "2026-08-29T08:22:41.836836+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/faq"}, {"content_hash": "4928517bcfbaee7780ca9d20f2d92083a352f05ba69702bee24301b4c795cec6", "fetched_at": "2026-08-29T08:22:41.839742+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/docs"}, {"content_hash": "949da973beff0dc0fe94afba32232a8753c53d70f2e3cbca68980e82b7086eb3", "fetched_at": "2026-08-29T08:22:41.841668+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/community"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:10:30.467499+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:10:30.467499+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:10:30.467499+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-29T17:22:31.292949+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "aa2dd3290c6eef67f30d63b1af45cd8ebc00601130dd315984000b2d445f572e", "fetched_at": "2026-08-28T04:10:30.467499+00:00", "kind": "readme", "missing": false, "url": "https://github.com/falcosecurity/falco"}, {"content_hash": "c1326ba2b61935710269bcb68ff7d734268cfa2904447bd88d840d997fb62bce", "fetched_at": "2026-08-29T08:22:41.817950+00:00", "kind": "homepage", "missing": false, "url": "https://falco.org"}, {"content_hash": "4fe5d21fcdfe91fdf1281953af87ff45a78e3353e073e5d8f5269789576c344f", "fetched_at": "2026-08-29T08:22:41.826971+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about"}, {"content_hash": "ad6a04ec20ca17986624044bc66f527844e32cd9b40361208bfc9564c5453ab5", "fetched_at": "2026-08-29T08:22:41.828841+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/why-falco"}, {"content_hash": "8cc1b60a10163a0b3c1c119d0c0c99a46a829c0daf64eeb6affaac35c034d282", "fetched_at": "2026-08-29T08:22:41.830700+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/use-cases"}, {"content_hash": "768e3e22c5060dc87c6dcfef0b15638c356eb5c22357f059de87b4b0ffb86772", "fetched_at": "2026-08-29T08:22:41.832369+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/case-studies"}, {"content_hash": "7c198a7a4b3b0b92798d5d3080f5208041c9eb6d5f7533e164689a9dcf18c056", "fetched_at": "2026-08-29T08:22:41.833817+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/ecosystem"}, {"content_hash": "a0cc3322d127e4a6f1a0ccaadf35a93099b64b2a1c658cb8aac1ded3f3ad60cf", "fetched_at": "2026-08-29T08:22:41.836836+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/faq"}, {"content_hash": "4928517bcfbaee7780ca9d20f2d92083a352f05ba69702bee24301b4c795cec6", "fetched_at": "2026-08-29T08:22:41.839742+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/docs"}, {"content_hash": "949da973beff0dc0fe94afba32232a8753c53d70f2e3cbca68980e82b7086eb3", "fetched_at": "2026-08-29T08:22:41.841668+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/community"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:10:30.467499+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:10:30.467499+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-29T17:22:31.292949+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "aa2dd3290c6eef67f30d63b1af45cd8ebc00601130dd315984000b2d445f572e", "fetched_at": "2026-08-28T04:10:30.467499+00:00", "kind": "readme", "missing": false, "url": "https://github.com/falcosecurity/falco"}, {"content_hash": "c1326ba2b61935710269bcb68ff7d734268cfa2904447bd88d840d997fb62bce", "fetched_at": "2026-08-29T08:22:41.817950+00:00", "kind": "homepage", "missing": false, "url": "https://falco.org"}, {"content_hash": "4fe5d21fcdfe91fdf1281953af87ff45a78e3353e073e5d8f5269789576c344f", "fetched_at": "2026-08-29T08:22:41.826971+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about"}, {"content_hash": "ad6a04ec20ca17986624044bc66f527844e32cd9b40361208bfc9564c5453ab5", "fetched_at": "2026-08-29T08:22:41.828841+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/why-falco"}, {"content_hash": "8cc1b60a10163a0b3c1c119d0c0c99a46a829c0daf64eeb6affaac35c034d282", "fetched_at": "2026-08-29T08:22:41.830700+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/use-cases"}, {"content_hash": "768e3e22c5060dc87c6dcfef0b15638c356eb5c22357f059de87b4b0ffb86772", "fetched_at": "2026-08-29T08:22:41.832369+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/case-studies"}, {"content_hash": "7c198a7a4b3b0b92798d5d3080f5208041c9eb6d5f7533e164689a9dcf18c056", "fetched_at": "2026-08-29T08:22:41.833817+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/ecosystem"}, {"content_hash": "a0cc3322d127e4a6f1a0ccaadf35a93099b64b2a1c658cb8aac1ded3f3ad60cf", "fetched_at": "2026-08-29T08:22:41.836836+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/faq"}, {"content_hash": "4928517bcfbaee7780ca9d20f2d92083a352f05ba69702bee24301b4c795cec6", "fetched_at": "2026-08-29T08:22:41.839742+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/docs"}, {"content_hash": "949da973beff0dc0fe94afba32232a8753c53d70f2e3cbca68980e82b7086eb3", "fetched_at": "2026-08-29T08:22:41.841668+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/community"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:10:30.467499+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:10:30.467499+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:10:30.467499+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-29T17:22:31.292949+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "aa2dd3290c6eef67f30d63b1af45cd8ebc00601130dd315984000b2d445f572e", "fetched_at": "2026-08-28T04:10:30.467499+00:00", "kind": "readme", "missing": false, "url": "https://github.com/falcosecurity/falco"}, {"content_hash": "c1326ba2b61935710269bcb68ff7d734268cfa2904447bd88d840d997fb62bce", "fetched_at": "2026-08-29T08:22:41.817950+00:00", "kind": "homepage", "missing": false, "url": "https://falco.org"}, {"content_hash": "4fe5d21fcdfe91fdf1281953af87ff45a78e3353e073e5d8f5269789576c344f", "fetched_at": "2026-08-29T08:22:41.826971+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about"}, {"content_hash": "ad6a04ec20ca17986624044bc66f527844e32cd9b40361208bfc9564c5453ab5", "fetched_at": "2026-08-29T08:22:41.828841+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/why-falco"}, {"content_hash": "8cc1b60a10163a0b3c1c119d0c0c99a46a829c0daf64eeb6affaac35c034d282", "fetched_at": "2026-08-29T08:22:41.830700+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/use-cases"}, {"content_hash": "768e3e22c5060dc87c6dcfef0b15638c356eb5c22357f059de87b4b0ffb86772", "fetched_at": "2026-08-29T08:22:41.832369+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/case-studies"}, {"content_hash": "7c198a7a4b3b0b92798d5d3080f5208041c9eb6d5f7533e164689a9dcf18c056", "fetched_at": "2026-08-29T08:22:41.833817+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/ecosystem"}, {"content_hash": "a0cc3322d127e4a6f1a0ccaadf35a93099b64b2a1c658cb8aac1ded3f3ad60cf", "fetched_at": "2026-08-29T08:22:41.836836+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/faq"}, {"content_hash": "4928517bcfbaee7780ca9d20f2d92083a352f05ba69702bee24301b4c795cec6", "fetched_at": "2026-08-29T08:22:41.839742+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/docs"}, {"content_hash": "949da973beff0dc0fe94afba32232a8753c53d70f2e3cbca68980e82b7086eb3", "fetched_at": "2026-08-29T08:22:41.841668+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/community"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:10:30.467499+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:10:30.467499+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-29T17:22:31.292949+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "aa2dd3290c6eef67f30d63b1af45cd8ebc00601130dd315984000b2d445f572e", "fetched_at": "2026-08-28T04:10:30.467499+00:00", "kind": "readme", "missing": false, "url": "https://github.com/falcosecurity/falco"}, {"content_hash": "c1326ba2b61935710269bcb68ff7d734268cfa2904447bd88d840d997fb62bce", "fetched_at": "2026-08-29T08:22:41.817950+00:00", "kind": "homepage", "missing": false, "url": "https://falco.org"}, {"content_hash": "4fe5d21fcdfe91fdf1281953af87ff45a78e3353e073e5d8f5269789576c344f", "fetched_at": "2026-08-29T08:22:41.826971+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about"}, {"content_hash": "ad6a04ec20ca17986624044bc66f527844e32cd9b40361208bfc9564c5453ab5", "fetched_at": "2026-08-29T08:22:41.828841+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/why-falco"}, {"content_hash": "8cc1b60a10163a0b3c1c119d0c0c99a46a829c0daf64eeb6affaac35c034d282", "fetched_at": "2026-08-29T08:22:41.830700+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/use-cases"}, {"content_hash": "768e3e22c5060dc87c6dcfef0b15638c356eb5c22357f059de87b4b0ffb86772", "fetched_at": "2026-08-29T08:22:41.832369+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/case-studies"}, {"content_hash": "7c198a7a4b3b0b92798d5d3080f5208041c9eb6d5f7533e164689a9dcf18c056", "fetched_at": "2026-08-29T08:22:41.833817+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/ecosystem"}, {"content_hash": "a0cc3322d127e4a6f1a0ccaadf35a93099b64b2a1c658cb8aac1ded3f3ad60cf", "fetched_at": "2026-08-29T08:22:41.836836+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/faq"}, {"content_hash": "4928517bcfbaee7780ca9d20f2d92083a352f05ba69702bee24301b4c795cec6", "fetched_at": "2026-08-29T08:22:41.839742+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/docs"}, {"content_hash": "949da973beff0dc0fe94afba32232a8753c53d70f2e3cbca68980e82b7086eb3", "fetched_at": "2026-08-29T08:22:41.841668+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/community"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-29T17:22:31.292949+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "aa2dd3290c6eef67f30d63b1af45cd8ebc00601130dd315984000b2d445f572e", "fetched_at": "2026-08-28T04:10:30.467499+00:00", "kind": "readme", "missing": false, "url": "https://github.com/falcosecurity/falco"}, {"content_hash": "c1326ba2b61935710269bcb68ff7d734268cfa2904447bd88d840d997fb62bce", "fetched_at": "2026-08-29T08:22:41.817950+00:00", "kind": "homepage", "missing": false, "url": "https://falco.org"}, {"content_hash": "4fe5d21fcdfe91fdf1281953af87ff45a78e3353e073e5d8f5269789576c344f", "fetched_at": "2026-08-29T08:22:41.826971+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about"}, {"content_hash": "ad6a04ec20ca17986624044bc66f527844e32cd9b40361208bfc9564c5453ab5", "fetched_at": "2026-08-29T08:22:41.828841+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/why-falco"}, {"content_hash": "8cc1b60a10163a0b3c1c119d0c0c99a46a829c0daf64eeb6affaac35c034d282", "fetched_at": "2026-08-29T08:22:41.830700+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/use-cases"}, {"content_hash": "768e3e22c5060dc87c6dcfef0b15638c356eb5c22357f059de87b4b0ffb86772", "fetched_at": "2026-08-29T08:22:41.832369+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/case-studies"}, {"content_hash": "7c198a7a4b3b0b92798d5d3080f5208041c9eb6d5f7533e164689a9dcf18c056", "fetched_at": "2026-08-29T08:22:41.833817+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/ecosystem"}, {"content_hash": "a0cc3322d127e4a6f1a0ccaadf35a93099b64b2a1c658cb8aac1ded3f3ad60cf", "fetched_at": "2026-08-29T08:22:41.836836+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/faq"}, {"content_hash": "4928517bcfbaee7780ca9d20f2d92083a352f05ba69702bee24301b4c795cec6", "fetched_at": "2026-08-29T08:22:41.839742+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/docs"}, {"content_hash": "949da973beff0dc0fe94afba32232a8753c53d70f2e3cbca68980e82b7086eb3", "fetched_at": "2026-08-29T08:22:41.841668+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/community"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-29T17:22:31.292949+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "aa2dd3290c6eef67f30d63b1af45cd8ebc00601130dd315984000b2d445f572e", "fetched_at": "2026-08-28T04:10:30.467499+00:00", "kind": "readme", "missing": false, "url": "https://github.com/falcosecurity/falco"}, {"content_hash": "c1326ba2b61935710269bcb68ff7d734268cfa2904447bd88d840d997fb62bce", "fetched_at": "2026-08-29T08:22:41.817950+00:00", "kind": "homepage", "missing": false, "url": "https://falco.org"}, {"content_hash": "4fe5d21fcdfe91fdf1281953af87ff45a78e3353e073e5d8f5269789576c344f", "fetched_at": "2026-08-29T08:22:41.826971+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about"}, {"content_hash": "ad6a04ec20ca17986624044bc66f527844e32cd9b40361208bfc9564c5453ab5", "fetched_at": "2026-08-29T08:22:41.828841+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/why-falco"}, {"content_hash": "8cc1b60a10163a0b3c1c119d0c0c99a46a829c0daf64eeb6affaac35c034d282", "fetched_at": "2026-08-29T08:22:41.830700+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/use-cases"}, {"content_hash": "768e3e22c5060dc87c6dcfef0b15638c356eb5c22357f059de87b4b0ffb86772", "fetched_at": "2026-08-29T08:22:41.832369+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/case-studies"}, {"content_hash": "7c198a7a4b3b0b92798d5d3080f5208041c9eb6d5f7533e164689a9dcf18c056", "fetched_at": "2026-08-29T08:22:41.833817+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/ecosystem"}, {"content_hash": "a0cc3322d127e4a6f1a0ccaadf35a93099b64b2a1c658cb8aac1ded3f3ad60cf", "fetched_at": "2026-08-29T08:22:41.836836+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/faq"}, {"content_hash": "4928517bcfbaee7780ca9d20f2d92083a352f05ba69702bee24301b4c795cec6", "fetched_at": "2026-08-29T08:22:41.839742+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/docs"}, {"content_hash": "949da973beff0dc0fe94afba32232a8753c53d70f2e3cbca68980e82b7086eb3", "fetched_at": "2026-08-29T08:22:41.841668+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/community"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-29T17:22:31.292949+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "aa2dd3290c6eef67f30d63b1af45cd8ebc00601130dd315984000b2d445f572e", "fetched_at": "2026-08-28T04:10:30.467499+00:00", "kind": "readme", "missing": false, "url": "https://github.com/falcosecurity/falco"}, {"content_hash": "c1326ba2b61935710269bcb68ff7d734268cfa2904447bd88d840d997fb62bce", "fetched_at": "2026-08-29T08:22:41.817950+00:00", "kind": "homepage", "missing": false, "url": "https://falco.org"}, {"content_hash": "4fe5d21fcdfe91fdf1281953af87ff45a78e3353e073e5d8f5269789576c344f", "fetched_at": "2026-08-29T08:22:41.826971+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about"}, {"content_hash": "ad6a04ec20ca17986624044bc66f527844e32cd9b40361208bfc9564c5453ab5", "fetched_at": "2026-08-29T08:22:41.828841+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/why-falco"}, {"content_hash": "8cc1b60a10163a0b3c1c119d0c0c99a46a829c0daf64eeb6affaac35c034d282", "fetched_at": "2026-08-29T08:22:41.830700+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/use-cases"}, {"content_hash": "768e3e22c5060dc87c6dcfef0b15638c356eb5c22357f059de87b4b0ffb86772", "fetched_at": "2026-08-29T08:22:41.832369+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/case-studies"}, {"content_hash": "7c198a7a4b3b0b92798d5d3080f5208041c9eb6d5f7533e164689a9dcf18c056", "fetched_at": "2026-08-29T08:22:41.833817+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/ecosystem"}, {"content_hash": "a0cc3322d127e4a6f1a0ccaadf35a93099b64b2a1c658cb8aac1ded3f3ad60cf", "fetched_at": "2026-08-29T08:22:41.836836+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/about/faq"}, {"content_hash": "4928517bcfbaee7780ca9d20f2d92083a352f05ba69702bee24301b4c795cec6", "fetched_at": "2026-08-29T08:22:41.839742+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/docs"}, {"content_hash": "949da973beff0dc0fe94afba32232a8753c53d70f2e3cbca68980e82b7086eb3", "fetched_at": "2026-08-29T08:22:41.841668+00:00", "kind": "site_page", "missing": false, "url": "https://falco.org/community"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 95, "longevity": 100, "rhythm": 88}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 3879, "days_push": 30, "days_rel": 83, "gap_med": 15, "n_releases_24m": 16}, "score": 94, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}