| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Linux | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 0 |
| Spec score · eBPF Observability Tools | 7.9 (#12) | 7.0 (#25) |
| License | The repository identifies Apache-2.0 as its license. | The repository identifies Kerno as licensed under Apache License 2.0. |
| Permissions | The FAQ says a BPF program load failure with “Operation not permitted” may require running with sudo. | The documented Kubernetes security posture lists CAP_BPF, CAP_PERFMON, CAP_SYS_PTRACE, CAP_NET_ADMIN, and CAP_DAC_READ_SEARCH, and says the hot path does not require CAP_SYS_ADMIN. |
| Purpose | BCC is a toolkit for creating efficient kernel tracing and manipulation programs using eBPF. | Kerno is an eBPF-based incident diagnosis engine for production issues across Linux, Kubernetes, VMs, and bare metal. |
| Support | The project points users to its GitHub issue tracker, the IOVisor mailing list, and the #iovisor IRC channel for project discussion and help. | The security policy directs general questions to GitHub Discussions and vulnerability reports to [email protected], with acknowledgment targeted within 48 hours. |