tetragon

Implementing a Zero Trust network and runtime security model on Kubernetes with Cilium, Tetragon, Hubble, and L7 policies, and eBPF-powered detection.

Open-source distributed security control plane for asynchronous telemetry, cross-application threat correlation, deterministic detection, and cryptographically authenticated containment.

a gRPC client for tetragon

Hands-on Kubernetes attack & defense - 20 isolated CTF labs in disposable microVMs with live eBPF detection. Self-hostable for ~$70/mo.

Tetragon Playground

Run an LLM agent like a production workload — isolated, mediated, and fully accounted for.

POCs and Tetragon Rules for CVE-2024-21626 and CVE-2025-31133

Tells "quiet" from "not observed" in Falco/Tetragon security logs, using the collectors' own heartbeats, drop counters and cross-checks

Intrusion detection via behavioural graphs — eBPF tracing on Kubernetes (Tetragon DaemonSet), syscalls turned into behavioural graphs, Python analysis engine, red-team scenarios for validation.

Intent-aware runtime detection and adaptive containment for AI agents on Kubernetes using eBPF and Tetragon

Risk-tiered automated containment and rollback from breach detection to eBPF isolation.

Tetragon eBPF runtime security observability and enforcement for the ITL Talos cluster - process/file/syscall visibility via TracingPolicy CRDs. Wrapper chart around the upstream cilium/tetragon chart.

Real-time Kubernetes security monitoring with Tetragon, Kyverno, Prometheus & Grafana

Cisco Secure AI GitOps: reconcile OpenShift platform and tenant-cluster services through Argo CD, including Isovalent networking and observability.

This game was heavily inspired by "n-gon", by Ross Landgreen. (

Offline, deterministic runtime-behavior analysis & attack-chain detection for Linux. eBPF/Tetragon event correlation with transparent scoring and a 4-tier evaluation.

Sock Shop microservices deployed on AWS EKS. Terraform infrastructure, Kubernetes manifests, and Tetragon runtime security.