Lifecycle guide for Falco from Falco

All releases, patches, maintenance and support periods at a glance

All supported products Free Versio.io trial

📅 Last update on 2026-03-09

What is Falco?

Automate product release and end-of-life management

Falco can detect and alert on any behavior that involves making Linux system calls. Falco alerts are triggered based on specific system calls, arguments, and properties of the calling process. Falco operates at the user space and kernel space. The system calls are interpreted by the Falco kernel module. The syscalls are then analyzed using the libraries in the userspace. The events are then filtered using a rules engine where the Falco rules are configured. Suspicious events are then alerted to outputs that are configured as Syslog, files, Standard Output, and others.

The entire lifecycle of Falco

The following figure shows you the visualised product life cycle of Falco. You can see all releases with the latest patch version, the long-term support characteristics (orange flag in the green circle, the periods for version provision, maintenance and support.