@kernelpanic calling osquery a vuln management system is probably not a good way to think about it. It measures and reports system state, but doesn't inherently check for weaknesses/vulnerabilities