Compare software

Tracee vs Falco: catalog facts
Tracee	Falco
Free Free and open source.	Free The open-source software is available without a license fee. Hosting, hardware and…
Linux, Command line	Linux, Command line
eBPF-based tracing with low overhead on the kernel Built-in detectors and signatures for suspicious activity	Applies rules to system events and container context.
Linux only Requires kernel eBPF support and administrator privileges	Requires system access and detection rules suited to the workload.
Downloadable app	Downloadable app
Open source	Open source
License not stated	License: Apache-2.0
No account needed	Not stated if an account is needed
Works offline	Not stated if it works offline
Official website Full listing and sources Checked September 23, 2026	Official website Full listing and sources Checked September 22, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.