---
title: "Discussion on \"Falco on Kubernetes: Runtime Security with eBPF\" | Hashnode"
description: "Discussion on \"Falco on Kubernetes: Runtime Security with eBPF\". Originally published on DevToolHub.\n\nMost K8s security tools scan configs. Falco watches what containers actually do at runtime.\nIt runs as a DaemonSet and monitors kernel system calls via eBPF. When"
url: "https://hashnode.com/posts/falco-on-kubernetes-runtime-security-with-ebpf/6a55578924b325e493cf44a4"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Falco on Kubernetes: Runtime Security with eBPF](https://devtoolhub.hashnode.dev/falco-on-kubernetes-runtime-security-with-ebpf?utm_source=hashnode&utm_medium=feed)

Originally published on DevToolHub. Most K8s security tools scan configs. Falco watches what containers actually do at runtime. It runs as a DaemonSet and monitors kernel system calls via eBPF. When

Jul 13 · 1 min read · devtoolhub.hashnode.dev  
Read the article

-   [#kubernetes](https://hashnode.com/tag/kubernetes)
-   [#security](https://hashnode.com/tag/security)
-   [#devsecops](https://hashnode.com/tag/devsecops)
-   [#falco](https://hashnode.com/tag/falco)

## Written by

[Amaresh Pelleti](https://hashnode.com/@amareswer)

@amareswer

  
[View profile](https://hashnode.com/@amareswer)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.