Alternatives

Osctrl alternatives for AI agents.

Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.

Current skill

Osctrl

Fast and efficient osquery management

84
Quality
86
Trust
503
Stars
#1

Velociraptor

Similarity 137Trust 89Excellent 100

Digging Deeper....

4.0K starsJun 16, 2026 pushdevopsGoIncident Response
$ npx skills add Velocidex/velociraptor
#2

Kubescape

Similarity 118Trust 97Excellent 100

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

11K starsJun 15, 2026 pushdevopsGoKubernetes
$ npx skills add kubescape/kubescape
#3

My Arsenal Of Aws Security Tools

Similarity 117Trust 91Excellent 100

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

9.5K starsApr 17, 2026 pushdevopsShellIncident Response
$ npx skills add toniblyx/my-arsenal-of-aws-security-tools
#4

UTMStack

Similarity 117Trust 88Excellent 85

Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

568 starsJun 16, 2026 pushdevopsTypeScriptIncident Response
$ npx skills add utmstack/UTMStack
#5

Cerbos

Similarity 116Trust 94Excellent 100

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

4.5K starsJun 16, 2026 pushdevopsGoKubernetes
$ npx skills add cerbos/cerbos
#6

Tracee

Similarity 116Trust 92Excellent 100

Linux Runtime Security and Forensics using eBPF

4.5K starsJun 15, 2026 pushdevopsGoKubernetes
$ npx skills add aquasecurity/tracee
#7

Hayabusa

Similarity 116Trust 95Excellent 100

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

3.2K starsJun 7, 2026 pushdevopsRustIncident Response
$ npx skills add Yamato-Security/hayabusa
#8

Dockle

Similarity 115Trust 92Excellent 100

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

3.3K starsApr 4, 2026 pushdevopsGoKubernetes
$ npx skills add goodwithtech/dockle
#9

Volatility3

Similarity 115Trust 89Excellent 100

Volatility 3.0 development

4.2K starsMay 26, 2026 pushdevopsPythonIncident Response
$ npx skills add volatilityfoundation/volatility3
#10

ContainerSSH

Similarity 115Trust 91Excellent 100

ContainerSSH: Launch containers on demand

3.1K starsMay 19, 2026 pushdevopsGoKubernetes
$ npx skills add ContainerSSH/ContainerSSH
#11

Rustinel

Similarity 115Trust 85Strong 83

Open-source cross-platform endpoint detection engine for Windows, macOS, and Linux using ETW, ESF, eBPF, Sigma, YARA, IOCs, and ECS NDJSON alerts.

377 starsJun 15, 2026 pushdevopsRustIncident Response
$ npx skills add Karib0u/rustinel
#12

Sleuthkit

Similarity 115Trust 90Excellent 100

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

3.1K starsJun 12, 2026 pushdevopsCIncident Response
$ npx skills add sleuthkit/sleuthkit
#13

Beagle

Similarity 115Trust 84Strong 72

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

1.3K starsDec 13, 2022 pushdevopsPythonIncident Response
$ npx skills add yampelo/beagle
#14

Launcher

Similarity 115Trust 82Strong 80

Osquery launcher, autoupdater, and packager

542 starsJun 12, 2026 pushdevopsGoDevOps
$ npx skills add kolide/launcher
#15

Antrea

Similarity 115Trust 93Excellent 100

Kubernetes networking based on Open vSwitch

1.8K starsJun 19, 2026 pushdevopsGoKubernetes
$ npx skills add antrea-io/antrea
#16

Sshportal

Similarity 114Trust 92Excellent 100

:tophat: simple, fun and transparent SSH (and telnet) bastion server

1.9K starsJun 14, 2026 pushdevopsGoDevOps
$ npx skills add moul/sshportal

How to choose

When should you switch?

Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep Osctrl if it already passes your workflow test and repository review.

Next step

Compare top candidates side by side

Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.