---
canonical: "https://www.softatlas.io/aqua-security/products/tracee"
name: "Tracee"
provider: "Aqua Security"
category: "IT & Security / Cybersecurity / Threat Detection"
review_count: 0
ai_powered: false
website: "https://www.aquasec.com/products/tracee"
updated: "2026-07-29"
---

# Tracee

By [Aqua Security](/aqua-security.md)

Tracee is an open-source runtime security and forensics tool for Linux, designed to detect suspicious behavior and provide insights into system activity.

## Features
- Detect suspicious behavior using eBPF technology
- Identify defense evasion techniques with behavioral indicators
- Deploy easily with Kubernetes and Docker
- Customize and filter threat detection events
- Consume Tracee events via webhook interface
- Monitor Linux system calls and custom security events
- Prevent evasion by attackers using cutting edge eBPF features

## Built for
DEVELOPERS, OPERATIONS

Source: https://www.softatlas.io/aqua-security/products/tracee