# Falco vs Palo Alto Prisma Cloud

**Leader by Vioscale score:** Falco

| Attribute | Falco | Palo Alto Prisma Cloud |
|---|---|---|
| **Vioscale score** | 55.2 (38% (low)) | 46.7 (26% (low)) |
| activity.commits_last_30d | 11 | - |
| adoption.dependent_repos | 0 | - |
| adoption.github_stars | 9,305 | - |
| deployment.options | `{"cloud":true,"on_prem":true,"self_hosted":true}` | `{"cloud":true,"hybrid":true,"on_prem":true,"self_hosted":true}` |
| description.long | Cloud-native runtime security tool that monitors hosts, containers, Kubernetes, and cloud environments for abnormal behavior and security threats using eBPF and kernel events. | A comprehensive cloud security platform that provides visibility into cloud assets, enforces compliance policies, detects and blocks threats in real time, and protects applications across their entire lifecycle from code development through production deployment. |
| features.capabilities | `{"cwpp":true,"kspm":true,"cloud_coverage":"Multi-cloud: hosts, containers, Kubernetes, and cloud environments","open_core_scanner":true,"agentless_scanning":false,"runtime_protection":true,"compliance_frameworks":"Rule-based detection for regulatory compliance violations"}` | `{"ciem":true,"cspm":true,"cwpp":true,"iac_scanning":true,"cloud_coverage":"AWS, Azure, Google Cloud, Alibaba Cloud, Oracle Cloud Infrastructure (five large","agentless_scanning":true,"runtime_protection":true,"compliance_frameworks":"Supports more than 75 compliance standards"}` |
| integrations.count | 50 | 19 |
| integrations.list | `[{"name":"Kubernetes"},{"name":"AWS EKS"},{"name":"Docker"},{"name":"GitHub"},{"name":"AWS CloudTrail"},{"name":"Okta"},{"name":"Nomad"},{"name":"Fluent Bit"},{"name":"Elasticsearch"},{"name":"S3"},{"name":"Slack"}]` | `[{"name":"Black Duck"},{"name":"Coverity"},{"name":"Checkmarx"},{"name":"GitLab"},{"name":"HashiCorp"},{"name":"Semgrep"},{"name":"Snyk"},{"name":"Veracode"},{"name":"Cortex Cloud"},{"name":"Cortex XDR"},{"name":"Cortex XSOAR"},{"name":"Cortex XSIAM"},{"name":"Cortex Xpanse"},{"name":"Cortex XDS"},{"name":"AWS"},{"name":"Azure"},{"name":"Google Cloud"},{"name":"Alibaba Cloud"},{"name":"Oracle Cloud Infrastructure"}]` |
| language.primary | C++ | - |
| license.spdx | Apache-2.0 | - |
| market.availability | - | `{"hqCountry":"US","primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true,"linux":true}` | `{"cli":true,"web":true}` |
| pricing | `{"type":"open_source","freeTier":true,"sourceUrl":"https://falco.org/","retrievedAt":"2026-08-13T17:01:04.261Z"}` | `{"type":"quote","sourceUrl":"https://www.paloaltonetworks.com/prisma/cloud","retrievedAt":"2026-08-14T13:46:16.817Z"}` |
| pricing.free_tier | yes | - |
| pricing.model | commercial | quote |
| pricing.price_level | free | unknown |
| pricing.transparent | yes | no |
| release.cadence_days | 4 | - |
| release.history | `[{"url":"https://github.com/falcosecurity/falco/releases/tag/0.44.1","date":"2026-06-11T07:53:06Z","type":"stable","version":"0.44.1"},{"url":"https://github.com/falcosecurity/falco/releases/tag/0.44.1-rc1","date":"2026-06-10T09:02:58Z","type":"prerelease","version":"0.44.1-rc1"},{"url":"https://github.com/falcosecurity/falco/releases/tag/0.44.0","date":"2026-05-26T14:29:36Z","type":"stable","version":"0.44.0"},{"url":"https://github.com/falcosecurity/falco/releases/tag/0.44.0-rc2","date":"2026-05-25T18:36:24Z","type":"prerelease","version":"0.44.0-rc2"},{"url":"https://github.com/falcosecurity/falco/releases/tag/0.44.0-rc1","date":"2026-05-21T11:06:27Z","type":"prerelease","version":"0.44.0-rc1"},{"url":"https://github.com/falcosecurity/falco/releases/tag/0.43.1","date":"2026-04-09T09:48:08Z","type":"stable","version":"0.43.1"},{"url":"https://github.com/falcosecurity/falco/releases/tag/0.43.0","date":"2026-01-28T13:49:28Z","type":"stable","version":"0.43.0"},{"url":"https://github.com/falcosecurity/falco/releases/tag/0.43.0-rc3","date":"2026-01-23T15:59:21Z","type":"stable","version":"0.43.0-rc3"},{"url":"https://github.com/falcosecurity/falco/releases/tag/0.43.0-rc2","date":"2026-01-22T12:28:19Z","type":"stable","version":"0.43.0-rc2"},{"url":"https://github.com/falcosecurity/falco/releases/tag/0.43.0-rc1","date":"2026-01-14T14:41:43Z","type":"prerelease","version":"0.43.0-rc1"},{"url":"https://github.com/falcosecurity/falco/releases/tag/0.42.1","date":"2025-11-06T10:19:14Z","type":"stable","version":"0.42.1"},{"url":"https://github.com/falcosecurity/falco/releases/tag/0.42.0","date":"2025-10-22T10:42:42Z","type":"stable","version":"0.42.0"},{"url":"https://github.com/falcosecurity/falco/releases/tag/0.42.0-rc4","date":"2025-10-22T09:16:14Z","type":"prerelease","version":"0.42.0-rc4"},{"url":"https://github.com/falcosecurity/falco/releases/tag/0.42.0-rc3","date":"2025-10-20T13:27:38Z","type":"prerelease","version":"0.42.0-rc3"},{"url":"https://github.com/falcosecurity/falco/releases/tag/0.42.0-rc2","date":"2025-10-17T14:37:23Z","type":"prerelease","version":"0.42.0-rc2"},{"url":"https://github.com/falcosecurity/falco/releases/tag/0.42.0-rc1","date":"2025-10-14T12:43:34Z","type":"prerelease","version":"0.42.0-rc1"},{"url":"https://github.com/falcosecurity/falco/releases/tag/0.41.3","date":"2025-07-01T09:54:42Z","type":"stable","version":"0.41.3"},{"url":"https://github.com/falcosecurity/falco/releases/tag/0.41.2","date":"2025-06-17T10:42:37Z","type":"stable","version":"0.41.2"},{"url":"https://github.com/falcosecurity/falco/releases/tag/0.41.1","date":"2025-06-05T07:40:03Z","type":"stable","version":"0.41.1"},{"url":"https://github.com/falcosecurity/falco/releases/tag/0.41.1-rc1","date":"2025-06-04T08:40:47Z","type":"prerelease","version":"0.41.1-rc1"}]` | - |
| reliability.status_page | - | yes |
| security.gdpr | - | yes |
| security.scorecard | 7.3 | - |
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=helm&package_name=cloudnativeapp%2Ffalco&per_page=100","last_12m":0,"max_severity":null}` | - |

## Capabilities (Cloud Security Software)

| Capability | Falco | Palo Alto Prisma Cloud |
|---|:--:|:--:|
| **Posture** |  |  |
| CSPM (posture / misconfig) | - | ✓ |
| KSPM (Kubernetes posture) | ✓ | - |
| **Workload** |  |  |
| CWPP (workload protection) | ✓ | ✓ |
| **Entitlements** |  |  |
| CIEM (entitlements) | - | ✓ |
| **Data** |  |  |
| DSPM (data posture) | - | - |
| **Pipeline** |  |  |
| IaC / pipeline scanning | - | ✓ |
| **Architecture** |  |  |
| Agentless scanning | ✗ | ✓ |
| **Runtime** |  |  |
| Runtime protection | ✓ | ✓ |
| **Coverage** |  |  |
| Cloud coverage | Multi-cloud: hosts, containers, Kubernetes, and cloud environments | AWS, Azure, Google Cloud, Alibaba Cloud, Oracle Cloud Infrastructure (five large |
| **Compliance** |  |  |
| Compliance frameworks assessed | Rule-based detection for regulatory compliance violations | Supports more than 75 compliance standards |
| **Licensing** |  |  |
| Open-core scanner available | ✓ | - |

*Source: Vioscale. Generated 2026-09-01T17:50:47.802Z. "-" = undocumented, not absent.*