@andrew yes we notice it works partly in some cases. i.e. we partly see 1password in results too but still other apps (like Arq, Slack will miss in results) - we try to get inventory on all apps of course. but right now status it is not working consistently to get precise info on apps via osquery, so for the moment I'think we can't trust results for app inventory here. We have experienced these issues with a couple of hundred clients and see that happen across 10.10.x, 10.11.x and 10.12.x. clients. In our case we can correlate app infos for clients/endpoints with what we get from osquery vs what we get from munki (or JAMF).