Some operators, or their own clients, want to run penetration tests or vulnerability scans before they rely on a platform. That is reasonable, but it needs to be agreed first.
What the Acceptable Use Policy says
Under the Acceptable Use Policy, you must not:
- probe, scan or test our systems for weaknesses without written permission,
- overload the systems, including denial-of-service tests or abusive request volumes,
- try to access accounts, systems or data you are not allowed to.
An unannounced scan can look exactly like an attack, and our protection may block the source address automatically.
How to arrange a test
- Write to support@adtech.eu before you start.
- Describe the scope: which addresses, what kind of test, and which tools.
- Give the dates and times, and the IP addresses the test will come from.
- Name a contact who can stop the test at once if needed.
- Wait for written permission before running anything.
If you find something
Report it to support@adtech.eu and give us reasonable time to fix it before sharing it with anyone else.
Self-hosted platforms
If you license or own the source code and run it on your own servers, testing your own infrastructure is up to you. The Security Watch plugin gives you daily checks of certificates, open ports, exposed files and backups.
Related: Acceptable Use Policy for operators and teams · Account security