
Falco 0.30: Runtime Security for Kubernetes
Falco 0.30 enhances runtime security with improved rule engine, better Kubernetes integration, and expanded threat detection capabilities for cloud-native workloads.

Falco 0.30 enhances runtime security with improved rule engine, better Kubernetes integration, and expanded threat detection capabilities for cloud-native workloads.

Kyverno 1.0 achieves General Availability, delivering a Kubernetes-native policy engine with validation, mutation, and generation capabilities for cloud-native security.

KubeArmor introduces eBPF-based runtime security enforcement for Kubernetes, providing system call filtering and policy enforcement at the kernel level.

Firecracker 1.3 enhances microVM capabilities with improved snapshot support, better performance, and enhanced security for serverless and edge workloads.

Bottlerocket 1.1 enhances the container-optimized OS with improved security, better Kubernetes integration, and enhanced tooling for node management.

Gatekeeper 3.5 enhances policy-as-code capabilities with improved mutation support, better template library, and enhanced performance for Kubernetes policy enforcement.

PodSecurityPolicy deprecation in Kubernetes 1.21 marks the transition to Pod Security Admission and alternative policy engines like Gatekeeper and Kyverno.

Falco 0.27 enhances runtime security with improved rule engine, better Kubernetes integration, and enhanced detection capabilities for cloud-native security.

Image Swapper 0.1 introduces a Kubernetes webhook for automatically mirroring and swapping container images, enabling image registry policies and security enforcement.

Firecracker 1.2.0 introduces snapshot diffing, cgroup v2 support, and CPU template tuning for faster, safer serverless microVMs.