Cybereason-Public/owLSM

An eBPF runtime security agent

eBPF Security Monitoring and Sandboxing Agent Based on Aya

eBPF-based Security Observability and Runtime Enforcement

Linux Runtime Security and Forensics using eBPF

Rust library for writing Linux security policies using eBPF

eBPF ransomware detection & response agent for Linux — single static binary, no kernel modules, behavioural scoring, process pause/kill

Linux defense. Your host. Your rules. Host-local Linux defense with auditable, fail-closed enforcement.

Hardens eBPF tools against privileged attackers via policy-based access controls

SOC, incident response and SecOps for Linux servers in one agent: learns each host, watches it with zero-token sensors, triages with a small model, and contains attacks under a root-owned policy. Optional hub for fleets.