https://github.com/osquery/osquery logo
Title
m

Mike S.

01/11/2023, 5:16 PM
What products would you recommend for centralized management of endpoints outside of Fleet/Kolide? Needs to be free/open-source. I know there is a free option for Fleet, but I'd like to see if there are other platforms that have better functionality.
z

zwass

01/11/2023, 7:21 PM
There is osctrl (#osctrl) which is MIT license and Zentral (https://github.com/zentralopensource/zentral) which is "open core" like Fleet.
s

seph

01/11/2023, 7:58 PM
Kolide is not a free/open-source tool. It is a commercial SaaS. (The agent side is OSS, but that’s not what you’re asking for.) Kolide’s Fleet is no longer maintained by Kolide, and is now FleetDM.
SecurityOnion also exists, though that might be fleet under the hood.
There’s Wazuh. But I don’t know anything about it other than that people ask questions sometimes
You can also write your own. The TLS protocol is pretty simple. But of course, that’s a can of worms
d

defensivedepth

01/11/2023, 8:48 PM
Security Onion 2.3 uses FleetDM under the hood
m

Mike S.

01/11/2023, 8:55 PM
This is great, thank you all for the info!