The best BCC alternatives
The rest of Best eBPF Observability Tools, in this site's order.
Kubeshark is aimed at SREs, network engineers, AI assistants, and agents working on root-cause analysis, incident response, and network reliability.
groundcover suits teams monitoring production environments that want telemetry collection through an eBPF sensor and a choice of cloud-managed or…
It suits teams profiling Kubernetes workloads that want runtime views alongside application traces and deployment context.
DeepFlow may suit teams monitoring cloud infrastructure and cloud-native applications that need tracing, profiling, and protocol parsing.
Odigos suits engineers, AI agents, and security teams investigating production behavior, containing attacks, or improving code.
Pixie suits developers who need observability and debugging tools for supported Kubernetes environments.
Kindling suits fiction writers who plan, including plotters, pantsers, and writers between those approaches.
Qpoint suits individuals, small teams, IT operations, security teams, and organizations governing AI agents across endpoints or hosted environments.
Inspektor Gadget suits operators and developers inspecting Linux hosts or Kubernetes clusters with eBPF-based tools.
Parca suits teams that want to run their own continuous profiler and examine profiles across processes or code versions.
Gyeeta suits teams running self-hosted Linux infrastructure that need TCP service and process visibility without instrumenting applications.
Tetragon suits security teams monitoring Linux, container, and Kubernetes workloads, including process, file, privilege, and network activity.
bpftrace suits Linux users who need kernel or user-space tracing for debugging or production tracing.
Caretta suits operators who want a self-hosted visual view of service networking in Kubernetes and can meet its Linux kernel and CO-RE requirements.
Tracee may suit teams seeking Linux runtime security monitoring, compliance monitoring, troubleshooting, or forensic investigation.