[nyir]

At least it's using some OSS, like osquery, c.f. <https://cdn.drata.com/agent/osquery/queries.json>, so you can easily see quite a bit of what it's going to gather.

[neonnomad]

It is based on osquery and we are happy to share any information including our third party security validation of the agent with prospects/customers.

Source: I am the Drata CISO