Kubernetes-aware eBPF-based security observability and runtime enforcement tool from the Cilium project.
Tetragon is a Kubernetes-aware security observability and runtime enforcement tool that applies policy and filtering directly in the kernel using eBPF. It enforces policies in real time, monitors process execution, system calls, and file and network activity, and ships with a library of vetted tracing policies. Events carry workload identities such as namespace and pod metadata and are delivered as JSON logs and through a gRPC endpoint.
Tetragon is a sub-project of Cilium and a Cloud Native Computing Foundation project. It installs as a Helm chart, through released Linux packages, or as a container image, and is maintained by the Cilium community.
Aqua Security
Aqua Container Security
aquasec.com
Datadog
Datadog Workload Protection
datadoghq.com
Sysdig
Falco, Sysdig Secure
sysdig.com
| Attribute | Tetragon | Aqua Container Security | Datadog Workload Protection | Falco, Sysdig Secure | |
|---|---|---|---|---|---|
| Provider |  | | | | |
| Founded | 2015 | 2015 | 2010 | 2013 | |
| Sells To | Developers, Enterprise | Enterprise | Enterprise, Small Business | Enterprise | |
| Pricing Model | Open Source | Usage-based by workloads or repos | Recurring | Recurring, Software | |
| Ownership | — | Private | Public | Venture-backed |
Provider
Founded 2015
Sells To Developers, Enterprise
Pricing Model Open Source
Ownership —
Provider
Founded 2015
Sells To Enterprise
Pricing Model Usage-based by workloads or repos
Ownership Private
Provider
Founded 2010
Sells To Enterprise, Small Business
Pricing Model Recurring
Ownership Public
Provider
Founded 2013
Sells To Enterprise
Pricing Model Recurring, Software
Ownership Venture-backed
Kubernetes-native container networking implementation providing CNI connectivity and NetworkPolicy security for pod workloads.
