# Blog: Introducing Falco 0.40.0

DevFeed: [Blog: Introducing Falco 0.40.0](<https://devfeed.tech/articles/blog-introducing-falco-0-40-0-32490.md>)

Original publisher: [Read original article](<https://falco.org/blog/falco-0-40-0/>)

Published: 2025-01-28T00:00:00Z

Content type: release

Language: en

Sources: [Falco - Falco](<https://devfeed.tech/sources/falco-falco.md>), [Falco - The Falco blog](<https://devfeed.tech/sources/falco-the-falco-blog.md>)

Topics: [Falco](<https://devfeed.tech/topics/falco.md>), [Docker](<https://devfeed.tech/topics/docker.md>), [Processes](<https://devfeed.tech/topics/processes.md>), [Usability](<https://devfeed.tech/topics/usability.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [bug-fixes](<https://devfeed.tech/tags/bug-fixes.md>), [docker](<https://devfeed.tech/tags/docker.md>), [docker-images](<https://devfeed.tech/tags/docker-images.md>), [falco](<https://devfeed.tech/tags/falco.md>), [improvements](<https://devfeed.tech/tags/improvements.md>), [new-features](<https://devfeed.tech/tags/new-features.md>), [performance](<https://devfeed.tech/tags/performance.md>), [process](<https://devfeed.tech/tags/process.md>), [release](<https://devfeed.tech/tags/release.md>), [version](<https://devfeed.tech/tags/version.md>), [x86-64](<https://devfeed.tech/tags/x86-64.md>)

## AI overview

Falco 0.40.0 introduces streamlined Docker images, a reintroduced static x86_64 build using musl, process metadata filters, support for sendmmsg and recvmmsg syscall parameters, and plugin-suggested output fields. The release also includes performance, usability, and bug-fix improvements, along with breaking changes for upgraders.

## Source excerpt

Dear Falco Community, today we are happy to announce the release of Falco 0.40.0! This version brings several new features, performance improvements, and bug fixes that streamline Falco's detection capabilities. During this release cycle, we merged more than 52 PRs on Falco and more than 150 PRs for libs and drivers, version 0.20.0 and version 8.0.0 respectively. Thank you to our maintainers and contributors, as this would not happen without your support and dedication! To learn all about these changes, read on! What's new? TL;DR Key features: Streamlined Falco docker images; Falco static build has been reintroduced for x86_64 binary using musl; New process filters allow to filter events based on process metadata; Added support for sendmmsg and recvmmsg syscalls parameters; Plugins suggested output fields are now available in the Falco engine; This release also comes with breaking changes that you should be aware of before upgrading. Major features and improvements The 0.40.0 release contains a number of features and UX improvements. Here is a list of some of the key new capabilities. Streamlined Falco docker images In the Falco 0.40.0 release, the Falco team has streamlined the Docker images to improve usability and performance. The new images are designed to be more efficient and easier to use, providing a better experience for users deploying Falco in containerized environments. Key improvements include: Reduced Image Size: The new images are smaller, which reduces the time required to pull and deploy them. Optimized Layers: The layers in the Docker images have been optimized to improve build times and caching efficiency. Enhanced Security: The images have been hardened to enhance security, reducing potential vulnerabilities. These changes make it easier to deploy and manage Falco in various environments. Introducing new process filters A new set of process filters are made available in this release: proc.pgid, proc.pgid.name, proc.pgid.exe, proc.pgid.exepath, pr