In Development

Make your eBPF programsverifier-safe and production-ready.

Detect verifier errors, kernel compatibility risks, and security bugs before your eBPF programs reach production.

Terminal

$ bpfcheck ./agent.bpf.o --kernel 5.15,6.1,6.8

WARN event_t.comm may be partially uninitialized

ERROR Program may be rejected on Linux 5.15

INFO Helper return value needs null check before use

INFO Minimal reproducer written to ./bpfcheck-repro.c

▌

Prototype Preview — this output is illustrative and not yet available in the CLI

Features

Everything you need to ship eBPF programs with confidence.

Human-readable analysis of complex BPF verifier logs, showing root causes and fix suggestions.

Planned

Validate helper availability, verifier behavior, and BTF changes across multiple kernel versions.

Planned

Detect stack and event fields that are passed to userspace without being fully initialized.

Planned

Analyze CO-RE relocations and BTF dependencies for cross-kernel deployment issues.

Planned

Generate a minimal C program that reproduces verifier errors for sharing and debugging.

Planned

Run bpfcheck in CI pipelines for libbpf and Aya projects to catch issues before deployment.

Planned

bpfcheck is designed for developers and teams shipping production eBPF software.

eBPF security agents

Runtime security products

Observability agents

Network infrastructure

Kubernetes infrastructure

libbpf & Aya applications

bpfcheck is currently in active development. The initial release focuses on the core analysis capabilities most needed by eBPF developers.

Questions? Reach us at hello@bpfcheck.dev