The agent is intended to ensure devices meet the security/compliance requirements of the company. It is a lightweight read-only osquery based agent that we are

The agent is intended to ensure devices meet the security/compliance requirements of the company. It is a lightweight read-only osquery based agent that we are happy to share the configuration of with prospects/customers. To address some of your other points: * We have been talking about making it open source, though it is not today. * We do have a third party security validated report that we are happy to share with prospects/customers. * Builds are pulled directly within the Drata portal and the agent does auto-update to ensure we can push any security updates to it that we need to. We do sign the code and you should be able to validate it. Source: I am the Drata CTO