Welcome to the Falco Talon project: A tailor made response engine for Falco!

Documentation Contribute

React in real time to the threats detected by Falco!

The Falco Talon project is a community-driven no-code solution to create a fully customisable reponse engine to work in pair with Falco, the runtime security component.


It allows you to run series of actions following the name, the priority, the tags, the fields and more of the received Falco events. Falco Talon comes with multiple pre-integrated actions allowing you to focus on your rules and parameters and not on writing code.

Come to discuss!

The Falco maintainers are all on Slack! Join us to get help or just chat!

Read more …

Contributions welcome!

We do a Pull Request contributions workflow on GitHub. New users are always welcome!

Read more …

Follow us on Twitter!

For announcement of latest features etc.

Read more …