Falco has never flown alone. Around the runtime security engine at its core, a whole ecosystem has taken shape: the Operator that runs it, the connectors that carry its events, and the projects that turn detections into action. In this maintainer track session, the maintainers will look at how that ecosystem is maturing and where the project is heading next.

We will share the most relevant developments in Falco itself, from detection and performance to a smoother experience for writing and maintaining rules, and give particular attention to the ecosystem growing around it. With the Operator now production-ready, deploying and managing Falco across Kubernetes clusters is simpler than ever, and the projects around it keep expanding what teams can do once an event leaves the engine.

Join the maintainers for a look at what has changed since we last met, an honest view of where the project stands today, and a preview of the directions we are most excited about for the releases ahead.