--- title: Falco Reviews meta\_title: 'Falco Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter reviews by the users' company size, role or industry to find out how Falco works for a business like yours. aggregate\_rating: rating\_value: 4.0 review\_count: 3 scale: '5' date\_modified: '2026-07-17' parent\_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # Falco Reviews & Product Details Define what activity is considered normal for your containerized applications & be notified when an application deviates. * * * Seller [Sysdig](https://www.g2.com/sellers/sysdig-715eaed9-9743-4f27-bd2b-d3730923ac3e) Discussions [Falco Community](https://www.g2.com/products/falco/discuss) Show More ## Top-Rated Alternatives [ ![Dynatrace](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Dynatrace") Dynatrace 4.5/5(1,366) ](https://www.g2.com/products/dynatrace/reviews) [ ![Wiz](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Wiz") Wiz 4.7/5(842) ](https://www.g2.com/products/wiz-wiz/reviews) [ ![Microsoft Defender for Cloud](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Microsoft Defender for Cloud") Microsoft Defender for Cloud 4.4/5(438) ](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) [ View All Alternatives ](https://www.g2.com/products/falco/competitors/alternatives) ![Bikash s.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Bikash s.") BS Bikash s. DevOps Engineer Enterprise (\> 1000 emp.) 10/28/2024 "Enhancing Kubernetes Security with Falco: A Comprehensive Review" 4/5 What do you like best about Falco? Ease of Integration: Falco integrates seamlessly with Kubernetes and container environments. Makes it easy to deploy as a DaemonSet across the cluster. Customizable Rules: The ability to customize search rules helps teams tailor security reviews to their specific needs. Helps reduce false positives At the same time it guarantees that important events are recorded. Detailed notifications: When Falco detects an issue, it provides a detailed notification with context about the event. Help security teams quickly understand and respond to potential threats. Community Support: As an open source project, Falco benefits from a lively community that actively contributes to its development. It provides a wealth of resources, plugins, and shared experiences… Extensive coverage: Review various aspects of the Kubernetes ecosystem, including network activity. File access and configuration changes Provides a holistic view of security within a cluster Review collected by and hosted on G2.com. What do you dislike about Falco? Configuration Complexity: Although Falco provides customizable rules, setting up and fine-tuning these rules can be complex, especially for organizations with specific or intricate security requirements. New users might find the initial configuration overwhelming. Resource Consumption: As a DaemonSet running on each node, Falco can consume a noticeable amount of system resources, which might impact performance, especially in resource-constrained environments. This can be a concern for large clusters with many nodes. Review collected by and hosted on G2.com. What problems is Falco solving and how is that benefiting you? Runtime Threat Detection: Problem: Traditional security measures often focus on vulnerabilities and compliance during development but may overlook runtime security issues. Benefit: Falco continuously monitors the behavior of running containers, detecting anomalies or suspicious activities as they occur. This proactive approach allows for immediate response to potential threats, significantly reducing the risk of breaches. Visibility into Container Behavior: Problem: Containers are often treated as black boxes, making it challenging to understand what they are doing in real-time. Benefit: Falco provides visibility into system calls and actions performed by containers, enabling security teams to identify unusual patterns and respond to potential risks. This enhanced visibility leads to better security management and oversight. Alerting and Incident Response: Problem: Many organizations struggle with timely detection and alerting of security incidents, leading to delayed responses. Benefit: Falco generates real-time alerts for suspicious activities, allowing security teams to take swift action. This rapid response capability minimizes the potential impact of security incidents and improves overall incident management. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Anussha H.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Anussha H.") AH Anussha H. Cyber Security Analyst Small-Business (50 or fewer emp.) 9/21/2023 "A Good security toolfor linux systems" 4/5 What do you like best about Falco? It is really good for linux systems and is a cloud native security tool so it is quite good at the scalability front. It is very good looking when it comes to UI and does house a lot of securty tools within it. Review collected by and hosted on G2.com. What do you dislike about Falco? The only issue I faced was to the integration of Falco using API. It is much difficult as it isn't REST API. Hence, there is a learning curve involved when it comes to using this tool. Review collected by and hosted on G2.com. What problems is Falco solving and how is that benefiting you? With the need for securing systems becoming more vitals, having a scalable and reliable solution when it comes to security is much need. This tool was perfect for my use case and it was easy to scale. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Mansi S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Mansi S.") MS Mansi S. Software Engineer TDP-ll Mid-Market (51-1000 emp.) 9/25/2023 "Falco - Deep visibility" 4/5 What do you like best about Falco? As a security analyst. I like its powerful intrusion detection feature that detects suspicious activities. Also, its container and Kubernetes are a big support for organizations operating in cloud infrastructure. It is open-source so can be used for free. Review collected by and hosted on G2.com. What do you dislike about Falco? Falcon sometimes releases unnecessary alerts due to its default settings. Also, people with little knowledge in security field will find it hard to operate. Review collected by and hosted on G2.com. What problems is Falco solving and how is that benefiting you? It helps you to customize rules so that you can create rules for the threats that are relevant to your organization's environment. Most of the security tools are expensive, so it's a good support for smaller organisation as it is free. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ### There are not enough reviews of Falco for G2 to provide buying insight. Below are some alternatives with more reviews: [ 1 ![Dynatrace Logo](https://images.g2crowd.com/uploads/product/hd_favicon/1512659484/dynatrace.svg "Dynatrace Logo") Dynatrace 4.5 (1,366) Dynatrace has redefined how you monitor today’s digital ecosystems. AI-powered, full stack and completely automated, it’s the only solution that provides answers, not just data, based on deep insight into every user, every transaction, across every application. The world’s leading brands trust Dynatrace to optimize customer experiences, innovate faster and modernize IT operations with absolute confidence. ](https://www.g2.com/products/dynatrace/reviews "Dynatrace")[ 2 ![Wiz Logo](https://images.g2crowd.com/uploads/product/hd_favicon/991dbad301661dc9e1b78a7e252252b4/wiz-wiz.svg "Wiz Logo") Wiz 4.7 (842) Wiz is a CNAPP that consolidates CSPM, KSPM, CWPP, vulnerability management, IaC scanning, CIEM, DSPM, and container and Kubernetes security into a single platform. ](https://www.g2.com/products/wiz-wiz/reviews "Wiz")[ 3 ![Microsoft Defender for Cloud Logo](https://images.g2crowd.com/uploads/product/hd_favicon/a8a99a96fda235658139f710592f8a53/microsoft-defender-for-cloud.svg "Microsoft Defender for Cloud Logo") Microsoft Defender for Cloud 4.4 (438) Azure Security Center provides security management and threat protection across your hybrid cloud workloads. It allows you to prevent, detect, and respond to security threats with increased visibility. ](https://www.g2.com/products/microsoft-defender-for-cloud/reviews "Microsoft Defender for Cloud")[ 4 ![FortiCNAPP Logo](https://images.g2crowd.com/uploads/product/hd_favicon/6cfbdb30f4f7ce0c1ebf31d967800f1d/forticnapp.svg "FortiCNAPP Logo") FortiCNAPP 4.4 (386) FortiCNAPP is a comprehensive Cloud-Native Application Protection Platform (CNAPP) that consolidates Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), Cloud Infrastructure Entitlement Management (CIEM), Kubernetes security, and compliance into a single solution. Using AI-based anomaly detection and behavioral analytics, FortiCNAPP continuously monitors cloud environments to identify misconfigurations, vulnerabilities, and active threats in real time. The platform supports agentless and agent-based deployment models, ensuring flexible coverage across diverse architectures. FortiCNAPP also integrates with the Fortinet Security Fabric, correlating cloud data with network and endpoint insights from FortiGuard, FortiSOAR, and more, delivering full-stack threat context, faster remediation, and unified risk management. ](https://www.g2.com/products/forticnapp/reviews "FortiCNAPP")[ 5 ![Orca Security Logo](https://images.g2crowd.com/uploads/product/hd_favicon/7bfb8b139d34ddbb4c7f1c4dc8e7b029/orca-security.svg "Orca Security Logo") Orca Security 4.7 (316) Get workload-level visibility into AWS, Azure, and GCP without the operational costs of agents. You could buy three tools instead… but why? Orca replaces legacy vulnerability assessment tools, CSPM, and CWPP. Deploys in minutes, not months. ](https://www.g2.com/products/orca-security/reviews "Orca Security")[ 6 ![Aikido Security Logo](https://images.g2crowd.com/uploads/product/hd_favicon/281b7973f3fd54aeeba3bec666fa4da6/aikido-security.svg "Aikido Security Logo") Aikido Security 4.6 (256) Aikido Security is a developer-first software security platform. We scan your source code & cloud to show you which vulnerabilities are actually important to solve. Triaging is sped up by massively reducing false-positives and making CVEs human-readable. Aikido makes it simple to keep your product secure and gives you back time to do what youdo best: writing code. ](https://www.g2.com/products/aikido-security/reviews "Aikido Security")[ 7 ![AlgoSec Horizon Logo](https://images.g2crowd.com/uploads/product/image/thumb_square/thumb_square_45a75f85a8be38a11dd6bc3d85904968/algosec-horizon.png "AlgoSec Horizon Logo") AlgoSec Horizon 4.5 (224) AlgoSec is a business-driven security management solution. ](https://www.g2.com/products/algosec-horizon/reviews "AlgoSec Horizon")[ 8 ![TrendAI Vision One - Cloud Security Logo](https://images.g2crowd.com/uploads/product/image/thumb_square/thumb_square_cdd671625f5e27185587365aeeda296a/trendai-vision-one-cloud-security.jpg "TrendAI Vision One - Cloud Security Logo") TrendAI Vision One - Cloud Security 4.5 (187) Hybrid Cloud Security solution, powered by XGen security, delivers a blend of cross-generational threat defense techniques that have been optimized to protect physical, virtual, and cloud workloads. ](https://www.g2.com/products/trendai-vision-one-cloud-security/reviews "TrendAI Vision One - Cloud Security")[ 9 ![CrowdStrike Falcon Cloud Security Logo](https://images.g2crowd.com/uploads/product/hd_favicon/73bf09322e583714b809a5154ca47357/crowdstrike-falcon-cloud-security.svg "CrowdStrike Falcon Cloud Security Logo") CrowdStrike Falcon Cloud Security 4.5 (176) CrowdStrike Falcon® Cloud Security delivers advanced cloud-native application security, including breach prevention, workload protection and cloud security posture management. It's the industry’s only unified cloud-native application protection platform (CNAPP), which integrates agent-based and agentless protection to stop adversaries, prevents human error and meets compliance needs across all major clouds, workloads and operating systems to stop cloud breaches. ](https://www.g2.com/products/crowdstrike-falcon-cloud-security/reviews "CrowdStrike Falcon Cloud Security")[ 10 ![Qualys VMDR Logo](https://images.g2crowd.com/uploads/product/image/thumb_square/thumb_square_8f9c479b207589ba8dc7777f344ab0ac/qualys-vmdr.png "Qualys VMDR Logo") Qualys VMDR 4.4 (168) Discover, assess, prioritize, and patch critical vulnerabilities in real time and across your global hybrid-IT landscape — all from a single solution. ](https://www.g2.com/products/qualys-vmdr/reviews "Qualys VMDR") [Show More](#) ##### Pricing Pricing details for this product isn’t currently available. Visit the vendor’s website to learn more. [ View More Pricing Information ](https://www.g2.com/products/falco/pricing) ## Work at Sysdig? Claim this profile to respond to reviews, update product info, and reach in-market buyers. [ Claim this profile ](https://www.g2.com/products/falco/claim_requests/new?utm_medium=profile-footer-claim-cta&utm_source=g2) ##### Categories on G2 [Container Security](https://www.g2.com/categories/container-security-tools)[Runtime Application Self-Protection (RASP) Tools](https://www.g2.com/categories/runtime-application-self-protection-rasp-tools) ##### Explore More [What is the most affordable location intelligence solution for SMBs?](https://www.g2.com/discussions/what-is-the-most-affordable-location-intelligence-solution-for-smbs)[Which insurance platforms combine client management and renewal tracking most effectively for independent agencies?](https://www.g2.com/discussions/which-insurance-platforms-combine-client-management-and-renewal-tracking-most-effectively-for-independent-agencies)[Is Award Force worth it for awards management?](https://www.g2.com/discussions/is-award-force-worth-it-for-awards-management) [Which solution supports multi-project task assignments?](https://www.g2.com/discussions/which-solution-supports-multi-project-task-assignments)[What's the best enterprise content delivery network (eCDN) for accelerating live video distribution to enterprise audiences?](https://www.g2.com/discussions/what-s-the-best-enterprise-content-delivery-network-ecdn-for-accelerating-live-video-distribution-to-enterprise-audiences)[Pros and Cons Details](https://www.g2.com/products/falco/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)