Top EBPF GitHub Repositories & Tools (2026)

Cloud Native Runtime Security

Open-source agent runtime — SSH-native isolation, eBPF egress policy, Kubernetes + LXC backends, GPU passthrough, MCP-native CLI

eBPF-based Networking, Security, and Observability

Web-based Traffic and Cybersecurity Network Traffic Monitoring

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

An eBPF Manager for Linux and Kubernetes

Cloud native networking and network security

Coroot is an open-source observability and APM tool with AI-powered Root Cause Analysis. It combines metrics, logs, traces, continuous profiling, and SLO-based alerting with predefined dashboards and inspections.