

Very few things out there don’t require an agent. TacticalRMM is a decent self-hosted device management platform, but I don’t really trust them after some controversy with an embedded Monero miner in the agent (has since been removed, but come on).
MeshCentral is what TRMM uses for its remoting and its pretty robust, but doesn’t do patch management on its own. If most of your infrastructure is Linux, you can easily handle it yourself though.
TBH, manual management would be the easiest if your infrastructure is small enough.
Like other people say, “favorite” depends on the context. Here are ones I’ve had on repeat at one point or another.
The Hammer - Kublai Khan TX
Contraband - Make Them Suffer
The Migrant - Shadow of Intent
Die Alone - A Pale Horse Named Death (this one is for a sad day)
In The Name Of God - Rotting Christ
(literally anything, Garden of Earthly Delights is a good place to start) - Apocalypse Orchestra
Looking Down The Barrel of Today - Hatebreed
Bullet With A Name - Nonpoint
WAKE UP - The Browning (whole album is good, intro is a fucking headbanger)
Where The Things Have No Color - Destrage
The Orphan - Paleface Swiss
I have to go do stuff, but that should get you started.
*I’m back and adding some more, cuz why not:
I Am The Mountain - Windrose
Captain Morgan’s Revenge - Alestorm
Primo Victoria - Sabbaton
Vodka - Korpiklaani
Hardrádi - Hulkoff
Låt Napalmen Regna - Raubtier
Planet on Fire - Rob Sigurd
Hellhacker - Aaron F. Bianchi Jupiter
Destiny Crucified - Shokran
Tibet - Space of Variations
Homicide - Sammy Slamdance