Targeted policies
Assign rule sets by environment, cluster, or host group.
Falco rule management
Manage Falco rules without fleet-wide YAML drift
Falco and falcoctl load and update rules. OpenFalco is planned to add the missing team workflow: decide who gets a change, observe rollout health, and reverse it safely.
Distribution is only half the job
A rules file can reach a node and still fail operationally. Teams need compatibility checks, staged targeting, rollout status, exception ownership, and an audit trail.
Staged rollout
Canary changes before expanding them across the fleet.
Fast rollback
Restore the last known-good policy when noise or compatibility problems appear.
Founding access is for teams that want Falco rule changes to behave like controlled production releases.
Reserve founding accessWill the connector be open source?
Yes. The Falco connector is planned to be open source; the hosted control plane is commercial.
Does the MVP include a visual rule builder?
The founding scope covers enablement, exceptions, targeting, staged rollout, rollback, and audit—not a natural-language rule generator.