Amazon GuardDuty vs Falco
| Amazon GuardDuty | Falco | |
|---|---|---|
| Free plan | Yes | |
| Free trial | Yes | |
| Paid from | Free | |
| Platforms | api, Web | Linux, self-hosted |
| Free plan | No | Yes |
| Container protection | Yes | |
| Serverless protection | Yes | |
| Kubernetes protection | Yes | |
| Deployment model | hybrid | self_hosted |
| Response actions | EventBridge notifications; AWS Lambda processing; Amazon SNS alerts; EC2 Systems Manager automation; EC2, Kinesis, ECS, Step Functions, and Run Command targets | |
| Supported host OS | Bottlerocket; Ubuntu; Amazon Linux 2; Amazon Linux 2023; Red Hat 9.4; Fedora 34; Fedora 40; Fedora 41; CentOS Stream 9 | |
| Cloud platforms | AWS | |
| Runtime protection | Yes | |
| Kubernetes security | Yes |
Listed together in Best Cloud Workload Protection Platforms