tetragon

Implementing a Zero Trust network and runtime security model on Kubernetes with Cilium, Tetragon, Hubble, and L7 policies, and eBPF-powered detection.

Open-source distributed security control plane for asynchronous telemetry, cross-application threat correlation, deterministic detection, and cryptographically authenticated containment.

a gRPC client for tetragon

Run an LLM agent like a production workload — isolated, mediated, and fully accounted for.

Tetragon Playground

Hands-on Kubernetes attack & defense - 20 isolated CTF labs in disposable microVMs with live eBPF detection. Self-hostable for ~$70/mo.

POCs and Tetragon Rules for CVE-2024-21626 and CVE-2025-31133

Open source Go CLI that scans Kubernetes AI workloads (vLLM, Ollama, KubeRay, KServe, Qdrant, Milvus) for security misconfigurations and writes DORA evidence reports in text, JSON, HTML, PDF and SARIF, with signed evidence bundles and Cilium, Tetragon and Kyverno remediation policies.

Tells "quiet" from "not observed" in Falco/Tetragon security logs, using the collectors' own heartbeats, drop counters and cross-checks

Intrusion detection via behavioural graphs — eBPF tracing on Kubernetes (Tetragon DaemonSet), syscalls turned into behavioural graphs, Python analysis engine, red-team scenarios for validation.

Open mini-CNAPP: one graph from commit -> CI run -> image -> K8s pod -> runtime event. Checks Zero-Trust controls (Python + OPA/Rego) and traces Tetragon alerts through the verified Sigstore (cosign/Fulcio) certificate to the CI run, commit and failed control. Evaluated on real manifests, images and live kind clusters.

⭐️ CrowdStrike Falcon Antivirus — powerful endpoint protection 2026 security suite with setup installer. Includes malware detection keygen, threat intelligence license key, full version serial, latest build Pro updated. Get desktop version for Windows 10/11 PC. ⭐️

Intent-aware runtime detection and adaptive containment for AI agents on Kubernetes using eBPF and Tetragon

Risk-tiered automated containment and rollback from breach detection to eBPF isolation.

Tetragon eBPF runtime security observability and enforcement for the ITL Talos cluster - process/file/syscall visibility via TracingPolicy CRDs. Wrapper chart around the upstream cilium/tetragon chart.

Cisco Secure AI GitOps: reconcile OpenShift platform and tenant-cluster services through Argo CD, including Isovalent networking and observability.

Offline, deterministic runtime-behavior analysis & attack-chain detection for Linux. eBPF/Tetragon event correlation with transparent scoring and a 4-tier evaluation.