Base
Hardened build
minimal ports, security patches applied at build time
Fleet on Ubuntu 24.04
Azure
Security
Fleet, the open source osquery platform for device and endpoint management, ready to enroll hosts, run live queries and check security posture on first boot.
Overview
Fleet is an open source device management and endpoint security platform built on osquery. It enrolls laptops, servers and cloud hosts, then lets teams run live queries across the whole fleet, apply policies to check security posture, collect software inventory and surface vulnerabilities, and track every host from one place. Everything is driven from a full web interface, and a REST API and command line client make the same data available to automation, so security, IT and infrastructure teams share one accurate source of truth for what is running on every machine.
Why the cloudimg image
cloudimg ships Fleet fully installed, hardened and patched, served over HTTPS so the web interface answers the moment the instance boots, with no setup wizard left open. The image is secure by default: it ships no known credential. On each instance's first boot the one time setup page is consumed automatically to create the first administrator before the port is ever public, and a fresh administrator password, database password, cache password and server private key are generated and written to a root only file, with the interface served under a certificate generated uniquely for that instance. Every image is paired with a step by step deploy guide and backed by 24/7 support.
Common uses
- Endpoint visibility and live osquery fleets
- Security posture and policy compliance
- Software inventory and vulnerability tracking
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
KeePass Password Manager
Security
KeePass is a free, open source password manager that stores all your passwords in a highly encrypted database. The datab...
CrowdSec
Security
This image runs CrowdSec, the free and open source collaborative behavioural security engine.
Ollama GPU-Accelerated LLM Server
Security
This image runs Ollama 0.30, the easiest way to run open large language models locally - pull and serve Llama, Mistral, ...
OWASP ZAP
Security
This image runs OWASP ZAP (the Zed Attack Proxy), the world's most widely used open source web-application security scan...
step-ca
Security
This image runs step-ca, the open source online certificate authority from Smallstep for secure, automated X.509 and ACM...
Trivy Security Scanner
Security
This image runs Trivy, the open source, Apache-2.0 licensed all-in-one security scanner from Aqua Security.