One agent, any platform, up-to-the-minute data
Real-time answers from osquery for every OS
Use Fleet to harness the power of osquery to investigate all your computers and servers in real time.
Plays well with others
Ask any question about any endpoint anywhere—real-time results from all your servers and workstations in one single pane of glass.
Monitor macOS, Windows, Linux, and Chromebook computers, including servers.
IR and SecOps teams can respond proactively to incidents before they become emergencies.
Interpret incidents accurately and make decisions using actual device data in seconds.
Open source delivering data your way
Whether through the Fleet UI, API, or CLI, real-time insights are always accessible, with strong access controls ensuring your most valuable assets are always kept safe.
The observer+ user role empowers SecOps teams with advanced querying capabilities without administrative access.
API-only user levels guardrail UI access for GitOps.
Enhance your EDR
Fleet goes where EDRs dare to tread, from organization computers to production servers.
Fortune 1000 companies widely adopt Fleet for their endpoints from 1,000, 10,000, to over 100,000 installs.
Remotely set osquery flags to control initialization, disable/enable features, and select plugins.
Don’t know osquery?
Dedicated support from osquery experts
Osquery is the open-source agent that powers Fleet. And we have the most osquery experts around. We’ll help you realize the potential of this tool for your organization.
