Loading...
Osquery is a free Endpoint Detection and Response tool. Security professionals most commonly compare it with Do Not Disturb, Knockknock, . All 77 alternatives are matched by shared capabilities, tags, and NIST CSF 2.0 coverage.
A closer look at the 8 most relevant alternatives and competitors to Osquery, including their key features and shared capabilities.
Do Not Disturb is a free open-source macOS security tool that detects unauthorized physical access to laptops.
A free, open-source tool that uncovers persistently installed software on macOS, helping to generically reveal malware.
MIDAS (Mac Intrusion Detection Analysis System) - archived and no longer supported.
Doorman is an osquery fleet manager that allows administrators to remotely manage the osquery configurations retrieved by nodes.
An endpoint monitoring tool for Linux and macOS that reports file, socket, and process events to Zeek.
AI-powered endpoint protection, detection, and response platform
Multiplatform endpoint security with detection and response capabilities
Autonomous EDR preventing data theft, ransomware & identity theft attacks
Do Not Disturb is a free open-source macOS security tool that detects unauthorized physical access to laptops.
A free, open-source tool that uncovers persistently installed software on macOS, helping to generically reveal malware.
MIDAS (Mac Intrusion Detection Analysis System) - archived and no longer supported.
Doorman is an osquery fleet manager that allows administrators to remotely manage the osquery configurations retrieved by nodes.
An endpoint monitoring tool for Linux and macOS that reports file, socket, and process events to Zeek.
AI-powered endpoint protection, detection, and response platform
Multiplatform endpoint security with detection and response capabilities
Autonomous EDR preventing data theft, ransomware & identity theft attacks
AI-powered EDR solution for endpoint threat detection and automated response
EDR solution with Zero Trust architecture and AI-based malware detection
EDR solution with behavioral analytics and MITRE ATT&CK mapping
EDR solution with ransomware recovery, threat detection, and access control
AI-driven EDR for threat detection, response, and investigation on endpoints
Next-gen antivirus & EDR with pattern/behavior detection engines
EDR platform with automated cross-endpoint correlation and prevention-first approach
EDR solution for endpoint threat detection and response capabilities
AI-powered endpoint protection with integrated EPP and EDR capabilities
EDR solution for endpoint threat detection and response capabilities
EDR platform detecting and remediating endpoint threats with ML-based analysis
AI-based endpoint security with behavioral analysis and autonomous response
Enterprise endpoint protection platform with autonomous response capabilities
AI-powered endpoint protection platform with EDR and identity security
EDR and NGAV solution for endpoint threat detection, prevention, and response
AI-driven endpoint security with prevention, detection, and response capabilities
EDR solution with automated threat detection, remediation, and integrated NGAV
EDR solution with in-memory detection and machine learning capabilities
Prevention-first EDR stopping zero-day attacks, ransomware, and fileless malware
EDR platform with EPP capabilities for endpoint threat detection and response
Managed EDR with 24/7 SOC for Windows, macOS, and Linux endpoints
AI-driven endpoint security platform with EDR, NGAV, and autonomous response
EDR+EPP solution for endpoint protection, threat detection, and response
Endpoint security platform with managed AV, EDR, and 24/7 MDR capabilities
Automated CrowdStrike EDR deployment & mgmt platform for macOS & Windows devices
Runtime security agent for IoT devices with AI-based threat detection
Unified endpoint security platform with EDR, next-gen AV, and threat hunting
EDR solution for workstations and servers with attack detection capabilities
Behavior-based detection with proactive remediation capabilities for endpoints
AI-driven endpoint security platform with autonomous case management
Endpoint detection and response solution within HYPERSECURE IT platform
APIs for FireEye endpoint security management and monitoring operations
API for automating endpoint security actions and SIEM integrations
AI-driven ransomware detection, prevention, and recovery platform
Cloud-based EDR solution for threat detection and response across endpoints
Managed EDR solution with 24/7 SOC, AI-driven threat detection, and Zero Trust
Real-time endpoint threat investigation and incident response platform
EDR platform for APT threat hunting and ransomware prevention with MDR
EDR platform with integrated SIEM and SOAR for unified threat detection
Policy-based EDR solution monitoring endpoints for IoCs with automated responses
Endpoint security agent with ZTNA, EDR, and secure remote access capabilities
AI-driven endpoint protection platform for threat detection and response
Ransomware-specific detection tool for rapid identification of extortion attacks
AI-powered EDR detecting zero-day threats & APTs via behavioral analysis
Cross-platform EDR sensor for endpoint threat detection and telemetry.
Managed EPP, EDR, and patch management service for business endpoints.
eBPF-based, AI-driven EDR for edge, containers, and critical infra.
On-premises/hybrid EDR with local threat detection, response, and NAC integration.
Unified endpoint control plane combining EDR, EPP, and XDR with NAC/ZTNA enforcement.
European EPP+EDR+ASM platform with IKARUS malware engine in a single agent.
Kernel-level runtime integrity verification using NSA-licensed technology.
Enterprise endpoint security platform with EDR, XDR, and risk analytics.
Endpoint utility for EDR/XDR alert validation and user phishing reporting.
Endpoint agent detecting in-memory malicious code execution on Windows.
AI-powered ransomware detection & response agent with pre-execution blocking.
AI-based on-device endpoint agent for DLP, insider threat, and AI security.
Enterprise endpoint security with EDR, anti-ransomware, and behavior blocking
Comprehensive cybersecurity platform for hybrid and multi-cloud environments
Cutting-edge technology for developing security applications within the Linux kernel.
A comprehensive utility that shows what programs are configured to run during system bootup or login, and when you start various built-in Windows applications.
OpenEDR is an open-source platform enhancing cybersecurity through real-time detection and analysis of cyber threats.
YARA-Endpoint is a client-server architecture tool that can be used for endpoint protection and incident response.
ProcFilter is a process filtering system for Windows with built-in YARA integration, designed for malware analysts to create YARA signatures for Windows environments.
A script that validates Group Policy Object audit settings required for proper Microsoft Defender for Endpoint functionality.
Monitor WMI consumers and processes for potential malicious activity
A bash-based anti-forensic script that monitors USB ports and triggers system shutdown when unauthorized devices are detected.
An Event Hub to gather, process, and monitor system events and link them to an inventory.
A tool to locally check for signs of a rootkit with various checks and tests.
A Unix-based tool that scans for rootkits and other malware on a system, providing a detailed report of the scan results.
Common questions security professionals ask when evaluating alternatives and competitors to Osquery.
The most popular alternatives to Osquery include Do Not Disturb, Knockknock, MIDAS, Doorman, and Zeek Agent. These Endpoint Detection and Response tools offer similar capabilities and are frequently compared by security professionals evaluating their options.
