Perform penetration testing of Fleet and publish report

[GuillaumeRoss]

Goal

TODO
We want to get Fleet tested by an offensive security vendor.

Scope

1. Fleet itself (running in an instance we will provide to the vendor)
2. Orbit out of scope
3. osquery itself is out of scope, though exploiting Fleet from data returned to the osquery TLS APIs on the Fleet side is in scope.

How?

• Identify vendor
• Provide credentials + documentation to perform the test
• Testers perform testing
• Remediate issues
• Publish report

[GuillaumeRoss]

The report has been published, and a PR is in progress to post a blog about it.