Cloud Native Live: Streamlining Falco operations in production with Falcoctl

CNCF Online Programs

May 29, 4:00 – 5:00 PM

Virtual event

About this event

Falco is a cloud-native security tool for Linux systems. We designed it to detect security threats in real-time.

Join us on Wednesday May 29th and meet Falcoctl, a comprehensive solution for managing the lifecycle of Falco rules and plugins. As the Falco plugin ecosystem expands, we are enhancing Falcoctl to meet the increasing demand for advanced features, facilitating the efficient management of Falco in production environments.

In this session, participants will delve into the core functionalities of the Falcoctl CLI tool and learn how to deploy it on local Linux workstations and Kubernetes clusters using Helm. We'll also explore its capabilities in enhancing Falco's operational efficiency, especially as the Falco plugin ecosystem continues to evolve.

Then, we will conclude with insights into Falcoctl's advanced features, including integration with private registries and creating custom artifacts. These enable users to tailor Falco to their specific needs. Whether aiming to streamline rule deployment or enhance rule effectiveness in production environments, Falcoctl offers a seamless solution.


  • Nigel Douglas


    Senior Developer Advocate