G2

Saiful I.

Full Stack Developer

Mid-Market (51-1000 emp.)

6/10/2022

""Osquery review.""

4.5/5

What do you like best about Osquery?

Osquery takes a fresh look at security with its innovative platform. This single-agent solution creates rich application datasets using a universal query engine. It provides a high-performance relational database for quickly understanding infrastructure. Osquery makes querying easier. Our team can write queries based on SQL to explore data across all infrastructure and operating systems. Osquery uses SQL tables to represent processes, kernel modules, network connections, browser plugins, hardware events, and file hashes. Review collected by and hosted on G2.com.

What do you dislike about Osquery?

Osquery's bellows-like drawbacks include:

Containers are not supported by it.

Real-time operation is impossible.

Demand for support exceeds supply.

Users validate features.

Extension-related issues

Linux and macOS are platform-limited.

Frequently asked questions and advice. Review collected by and hosted on G2.com.

Recommendations to others considering Osquery:

Osquery has proven utility in the modern enterprise—gathering data for valuable insight into systems and infrastructure. It makes use of an API and a plugin to gain data access. I recommended it to only who is of my peers. Review collected by and hosted on G2.com.

What problems is Osquery solving and how is that benefiting you?

Osquery lets us use SQL tables to define processes, open network connections, loaded kernel modules, browser plugins, hardware events, and file hashes. The system implements SQL tables with an API plugin and extension. It improves our company's security and efficiency. It's useful for containers, cloud workloads, and zero-trust environments. Scaling Osquery is worth the investment for full-service vendor platforms. Review collected by and hosted on G2.com.