Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Falco by CNCF View product | Prisma Cloud Compute View product |
|---|---|---|
| Overview | ||
| What it is | What does Falco do? It covers real-time rule engine and falcosidekick routing. See typical use cases, self-hosted or container deployment and how it compares to rivals. | Get the facts on Prisma Cloud Compute: automated CI/CD gating. Built for container vulnerability scanning. Compare it with other Cloud Security options before you decide. |
| Product type | Cloud-Native Runtime Threat Detection Engine | Cloud Workload Protection Platform (CWPP) |
| Best for | Cross-industry, Technology, Cloud Engineering, Financial Services, SaaS | Cross-industry, Software Development, Financial Services, Technology, Healthcare |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | On-Premise | SaaSCloudHybridOn-Premise |
| Deployment details | Self-hosted; Kubernetes; Container Daemon; Open source binary; DaemonSet in Kubernetes; Docker container | Cloud; Hybrid; On-premises; Multi-cloud; DaemonSet / container agent deployment; Agentless host scanning; SaaS console |
| Data residency | Self-hosted / Local Host | Local host telemetry; centralized SaaS hosting in customer-designated region |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: no | SSO: yes |
| Role-based access (RBAC) | RBAC: no | RBAC: yes |
| Multi-tenant | Multi-tenant: no | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | KubernetesDockerLinux HostsCloud Infrastructure | KubernetesDockerAWSAzureGCPVMwarebare-metal Linux/Windows |
| Compliance | CNCF GraduatedApache 2.0CIS Benchmark alignment | SOC 2 Type II, ISO 27001, PCI DSS, HIPAA, GDPR |
| Integrations & coverage | ||
| Integrations | KubernetesPrometheusGrafanaSlackAWS Security HubElasticsearch | DockerKubernetesOpenShiftAWS EKSAzure AKSGoogle GKEJenkinsGitHub Actions |
| Industries | Cross-industryTechnologyCloud EngineeringFinancial ServicesSaaS | Cross-industrySoftware DevelopmentFinancial ServicesTechnologyHealthcare |
| Regions | Global | Global |
| Vendor | ||
| Company | CNCF | Palo Alto Networks |
| Headquarters | San Francisco, California, USA | Santa Clara, California, USA |
| Company size | 51-200 | 15,000+ |
| Founded | 2015 | 2005 |
Overview
What it is
Falco
What does Falco do? It covers real-time rule engine and falcosidekick routing. See typical use cases, self-hosted or container deployment and how it compares to rivals.Prisma Cloud Compute
Get the facts on Prisma Cloud Compute: automated CI/CD gating. Built for container vulnerability scanning. Compare it with other Cloud Security options before you decide.Product type
Falco
Cloud-Native Runtime Threat Detection EnginePrisma Cloud Compute
Cloud Workload Protection Platform (CWPP)Best for
Falco
Cross-industry, Technology, Cloud Engineering, Financial Services, SaaSPrisma Cloud Compute
Cross-industry, Software Development, Financial Services, Technology, HealthcarePricing
Pricing model
Falco
Contact VendorPrisma Cloud Compute
Contact VendorFree trial
Falco
Free trial: yesPrisma Cloud Compute
Free trial: yesDeployment
Deployment options
Falco
On-Premise
Prisma Cloud Compute
SaaSCloudHybridOn-Premise
Deployment details
Falco
Self-hosted; Kubernetes; Container Daemon; Open source binary; DaemonSet in Kubernetes; Docker containerPrisma Cloud Compute
Cloud; Hybrid; On-premises; Multi-cloud; DaemonSet / container agent deployment; Agentless host scanning; SaaS consoleData residency
Falco
Self-hosted / Local HostPrisma Cloud Compute
Local host telemetry; centralized SaaS hosting in customer-designated regionKey features
What it offers
Falco
- eBPF kernel syscall monitoring
- Real-time rule engine
- Kubernetes metadata enrichment
- Behavioral threat detection
- Falcosidekick routing
- Container runtime security
- Kernel-level intrusion detection
- Kubernetes anomaly alerting
Prisma Cloud Compute
- Container image vulnerability scanning
- Runtime anomaly detection
- Kubernetes admission control
- Serverless function defense
- Compliance benchmarking (CIS)
- Automated CI/CD gating
- File integrity monitoring
- Container vulnerability scanning
Platform & access
API access
Falco
API access: yesPrisma Cloud Compute
API access: yesSingle sign-on (SSO)
Falco
SSO: noPrisma Cloud Compute
SSO: yesRole-based access (RBAC)
Falco
RBAC: noPrisma Cloud Compute
RBAC: yesMulti-tenant
Falco
Multi-tenant: noPrisma Cloud Compute
Multi-tenant: yesMobile app
Falco
Mobile app: noPrisma Cloud Compute
Mobile app: noSupported platforms
Falco
KubernetesDockerLinux HostsCloud Infrastructure
Prisma Cloud Compute
KubernetesDockerAWSAzureGCPVMwarebare-metal Linux/Windows
Compliance
Falco
CNCF GraduatedApache 2.0CIS Benchmark alignment
Prisma Cloud Compute
SOC 2 Type II, ISO 27001, PCI DSS, HIPAA, GDPR
Integrations & coverage
Integrations
Falco
KubernetesPrometheusGrafanaSlackAWS Security HubElasticsearch
Prisma Cloud Compute
DockerKubernetesOpenShiftAWS EKSAzure AKSGoogle GKEJenkinsGitHub Actions
Industries
Falco
Cross-industryTechnologyCloud EngineeringFinancial ServicesSaaS
Prisma Cloud Compute
Cross-industrySoftware DevelopmentFinancial ServicesTechnologyHealthcare
Regions
Falco
Global
Prisma Cloud Compute
Global
Vendor
Company
Falco
CNCFPrisma Cloud Compute
Palo Alto NetworksHeadquarters
Falco
San Francisco, California, USAPrisma Cloud Compute
Santa Clara, California, USACompany size
Falco
51-200Prisma Cloud Compute
15,000+Founded
Falco
2015Prisma Cloud Compute
2005