Compatibility: 
Source: See falco website for details.
Falco is a cloud-native security tool designed for Linux systems. It employs custom rules on kernel events, which are enriched with container and Kubernetes metadata, to provide real-time alerts. Falco helps you gain visibility into abnormal behavior, potential security threats, and compliance violations, contributing to comprehensive runtime security.
To enable the addon:
microk8s enable falco
The addon can be disabled at any time with:
microk8s disable falco