Jibril: Runtime Security Engine
The runtime sensor powering Garnet
Last updated
The runtime sensor powering Garnet
Last updated
Jibril is a new architecture for runtime security, observability and threat detection built for modern workloads, threats and teams –- developed by a team of experts with experience working on industry-standard OSS like Tracee, Falco and FluentBit. It offers some unique benefits over traditional approaches, such as:
A ultra-lightweight sensor powered by eBPF
A behavior-based detection & policy engine
In-kernel enforcement
You can read more about the detailed concepts around Jibril such as detections, architecture, and how to get started at:
As we work on developing towards a standard and play well with the ecosystem, we are actively seeking community feedback and requests.
Become a design partner We are looking to partner up with select teams to help us guide the development of jibril. Please reach out with details on your use case at jibril@garnet.ai — we'd love to hear from you!
