osquery and osctrl form a powerful security duo that enables organizations to query systems like databases, monitor infrastructure in real-time, and centrally manage distributed endpoints through a modular architecture with robust configuration, querying, and forensic capabilities.

The osctrl-api component extends osctrl's capabilities by providing a secure API that enables integration with other security tools, empowers automation, and allows engineering teams to build custom solutions around osquery fleet management.

osctrl is an open-source management solution for osquery that provides scalable TLS endpoint functionality with features for monitoring, configuration distribution, log collection, on-demand querying, and file carving.