qpoint-io/qtap

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1456 stars · 56 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Qtap is an eBPF agent that hooks TLS/SSL functions in the Linux kernel to capture network traffic before and after encryption, with full process, container, and protocol context. It provides visibility into egress traffic without proxies, certificate management, or application changes, feeding data to plugins and the QPoint platform.

Use cases

• monitor external API calls and responses
• capture pre-encrypted network traffic with process context
• debug encrypted service communication
• audit egress traffic for compliance
• detect failed requests and errors in outbound traffic
• discover which processes make outbound connections
• track sensitive data leaving containers

When to choose

• you need visibility into encrypted egress traffic without deploying proxies or sidecars
• you want to know which processes or containers are calling external APIs and what they send
• you run Kubernetes or Linux hosts and need out-of-band, low-overhead traffic introspection
• you need compliance auditing of encrypted communications

When to avoid

• you need deep packet inspection of non-TLS or kernel-bypassed traffic
• you require a solution on non-Linux platforms
• you cannot run eBPF due to kernel version or privilege restrictions
• you want a fully open-source analytics stack - advanced features like alerting, RBAC, and sensitive data scanning are tied to the commercial QPoint platform

Facets

service · maturity active

monitoring tracing security logging security monitoring networking developer-tools self-hosted cloud ebpf tls-visibility egress-traffic traffic-capture observability agent network-inspection devops containers linux docker kubernetes

Member repositories

For agents

markdown · JSON · MCP: product_card(name="qpoint-io/qtap")