Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-04-21 13:37:30 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 91

Handbook: Adding 2024 pen test document to security audit page (#21393)

Browse source
This commit is contained in:
Joanne Stableford 2024-08-21 11:15:37 -04:00 committed by GitHub
parent b965587671
commit abee4954d7
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

BIN
docs/files/2024-06-14-fleet-penetration-test.pdf Normal file
View file

Binary file not shown.

9
handbook/business-operations/security-audits.md
View file

@ -1,6 +1,15 @@
# Security audits
This page contains explanations of the latest external security audits performed on Fleet software.
## June 2024 penetration testing of Fleet 4.50.1
In June 2024, [Latacora](https://www.latacora.com/) performed an application penetration assessment of the application from Fleet.
An application penetration test captures a point-in-time assessment of vulnerabilities, misconfigurations, and gaps in applications that could allow an attacker to compromise the security, availability, processing integrity, confidentiality, and privacy (SAPCP) of sensitive data and application resources. An application penetration test simulates the capabilities of a real adversary, but accelerates testing by using information provided by the target company.
Latacora identified a few medium and low severity risks, and Fleet is prioritizing and responding to those within SLAs. Once all action has been taken, a summary will be provided.
You can find the full report here: [2024-06-14-fleet-penetration-test.pdf](https://github.com/fleetdm/fleet/raw/main/docs/files/2024-06-14-fleet-penetration-test.pdf).
## June 2023 penetration testing of Fleet 4.32
In June 2023, [Latacora](https://www.latacora.com/) performed an application penetration assessment of the application from Fleet.