Features
Each feature, on a page of its own.
Every security feature is in Community Edition. What a paid key adds is capacity.
Admission decisions
Allow or deny before a pod runs, from a cached verdict
Admission decisionsImage scanning
Trivy inside the cluster; every image rescanned daily
Image scanningPolicy what-if
Replay a draft policy against recorded admissions
Policy what-ifSignature verification
cosign, by key or keyless
Signature verificationAttestations and SBOM
in-toto, SBOMs, SLSA provenance, signed VEX
Attestations and SBOMEvidence packages
A signed period report mapped to a framework
Evidence packagesAudit trail
A sealed ledger and a log of every change
Audit trailRuntime with Falco 1.2.0
Falco sees, Attestkeep decides
Runtime with FalcoIssue tracker sync
One issue per digest and CVE in GitHub, GitLab or Jira
Issue tracker syncNotifications
Slack, Teams, e-mail or any webhook
NotificationsAir-gapped operation
Mirrored database, offline activation
Air-gapped operationInstall it yourself.
Create an account, confirm your e-mail with the code we send, take the free Community key from the Licenses page, and install with Helm.
Create an account