Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

<https://github.com/jmpsec/osctrl/pull/899|#899 Display risk score based on security posture data using SOC2 and ISO27001 controls>
Pull request opened by <https://github.com/javuto|javuto>
Calculation and display of risk score, based on the posture checks added in <https://github.com/jmpsec/osctrl/pull/898|#898>. They display the overall risk evaluation per node, using SOC2 and ISO27001 controls:
<https://private-user-images.githubusercontent.com/1271349/623293664-e44a0a8a-1950-4d29-9480-dfd4a2ab4ea6.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.OtAeGAAU_sxOL8G1PUgHjFfqD3JGsmH-WXBI1ohE6z4|Screenshot 2026-07-17 at 17 22 52>
<https://github.com/jmpsec/osctrl|jmpsec/osctrl>

<https://github.com/jmpsec/osctrl/pull/899|#899 Display risk score based on security posture data using SOC2 and ISO27001 controls>
Pull request merged by <https://github.com/javuto|javuto>
<https://github.com/jmpsec/osctrl|jmpsec/osctrl>