Fleet
Open device management and osquery fleet platform for querying and managing endpoints.
Technical Architecture & Overview
Fleet started as a common manager for osquery deployments and has grown into an open source device management platform covering MDM, patching, software deployment, and vulnerability reporting across macOS, Windows, Linux, iOS, and Android. Security teams still use scheduled queries and live queries for detection data. The repository is exceptionally active, with a free self-hostable core.
Targeted Technical Use Cases
Running osquery at scale with scheduled detection queries, or consolidating endpoint management into one open platform.
Evaluation & Trade-offs
Core Strengths
- +The default way to operate osquery at fleet scale.
- +MDM and patching without proprietary agents.
- +Transparent open development.
Trade-Offs & Limitations
- -Mixed licensing across the repository.
- -Security teams share the console with IT management workflows.
Defensive Security Application
Continuous endpoint state queries for exposure tracking and detection data collection.
Frequently Asked Questions
What is Fleet?→
Fleet started as a common manager for osquery deployments and has grown into an open source device management platform covering MDM, patching, software deployment, and vulnerability reporting across macOS, Windows, Linux, iOS, and Android. Security teams still use scheduled queries and live queries for detection data. The repository is exceptionally active, with a free self-hostable core.
What is Fleet used for?→
Running osquery at scale with scheduled detection queries, or consolidating endpoint management into one open platform.
What are the strengths of Fleet?→
- +The default way to operate osquery at fleet scale.
- +MDM and patching without proprietary agents.
- +Transparent open development.
What are the limitations of Fleet?→
- +Mixed licensing across the repository.
- +Security teams share the console with IT management workflows.
How is Fleet used defensively?→
Continuous endpoint state queries for exposure tracking and detection data collection.