osquery on a Mac
Query your endpoint like a database (agent) · Security Tools
osquery (Meta, now Linux Foundation) exposes the OS as SQL tables — processes, sockets, users, launchd items, file hashes — for ad-hoc investigation (osqueryi) or scheduled fleet telemetry (osqueryd). Install the macOS cask; pair it with Fleet (below) for a central web UI + API across many Macs.
Run osquery with FrontierStack
FrontierStack lists osquery in its Security Tools catalog. Install or connect it from one place, then monitor its status, ports and certificate, secure it with the firewall and Malware Audit, and back it up.
Run it all from one Mac app.
FrontierStack installs, monitors and secures the whole stack — locally and across your fleet — from a single native macOS app.
Download FrontierStack