Logo
Deploy Now

Categories

Security IT Operations Compliance Device Management MDM Vulnerability Management Osquery

Stars

6,756

Forks

995

Watchers

45

Developer links

Last Updated: 08-22-2026 12:37 AM (UTC)

Fleet

Fleet lets IT and security teams query every device in their organization like a SQL database, using osquery to surface installed software, running processes, configurations, and vulnerabilities within seconds across macOS, Windows, Linux, iOS, Android, and ChromeOS. The Go-based server exposes a web console and REST API for centralized device management, with MDM capabilities built on nanoMDM for Apple device enrollment, configuration profiles, and remote lock or wipe. Vulnerability management cross-references installed software inventories against NVD and OVAL CVE databases, automatically flagging known vulnerabilities with severity scores and remediation guidance. Software deployment handles OS updates using Apple Declarative Device Management, Windows Update, and custom installer packages distributed through S3-compatible storage. A GitOps workflow enables infrastructure-as-code management where device policies, osquery queries, and configuration profiles live as YAML files in Git repositories, with CI/CD pipelines pushing changes through the fleetctl CLI. The fleetd agent bundle includes osquery for telemetry, Orbit for version management, and Fleet Desktop providing end users a menu bar status indicator. Integrations connect to Snowflake, Splunk, Elastic, Jira, Zendesk, Vanta, and GitHub Actions for automated compliance reporting. CIS benchmark policies verify security baselines across operating systems. Deployment requires MySQL for persistence and Redis for caching, running as Docker containers or on Kubernetes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Fleet
Fleet
Fleet
Fleet
Fleet

Benefits

  • Every Device as SQL Database
  • Osquery transforms each enrolled endpoint into a queryable relational database, enabling sub-30-second real-time queries about installed software, running processes, network connections, and system configuration.
  • Cross-Platform Device Management
  • Single console manages macOS, Windows, Linux, iOS, Android, and ChromeOS devices with MDM enrollment, configuration profiles, remote wipe, and software deployment across all operating systems.
  • GitOps Infrastructure as Code
  • Define device policies, osquery queries, and configuration profiles in YAML files stored in Git repositories, deploying changes through CI/CD pipelines via the fleetctl command-line tool.
  • Automated Vulnerability Detection
  • Cross-references installed software inventories against NVD and OVAL CVE databases, automatically flagging vulnerabilities with severity scores and connecting to Jira or Zendesk for remediation.

Features

  • Osquery Telemetry Engine
  • Open-source osquery agent collects structured operating system data as SQL tables, enabling real-time queries about software, hardware, processes, and network state across all endpoints.
  • Apple MDM via NanoMDM
  • Built on nanoMDM for Apple device enrollment, configuration profile delivery, OS update enforcement via Declarative Device Management, and remote lock or wipe capabilities.
  • Software Deployment Pipeline
  • Distribute custom installer packages through S3-compatible storage, manage OS updates via platform-native mechanisms, and enforce software installation policies across device fleets.
  • CIS Benchmark Compliance
  • Pre-built policy packs verify device configurations against CIS security benchmarks, generating compliance reports and flagging non-conforming hosts for remediation.
  • Enterprise Integration Hub
  • Webhook events and API integrations connect to Snowflake, Splunk, Elastic, Jira, Zendesk, Vanta, and GitHub Actions for automated logging, ticketing, and compliance workflows.