You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -14,25 +15,28 @@ This policy is for customers that wish to perform an external penetration test o
14
15
At Hypernode, we support responsible security testing practices that help customers improve the safety and resilience of their hosted application, and our platform. Customers may conduct penetration tests on their own hosting environments under the following conditions and guidelines.
15
16
16
17
## Scope of Testing
18
+
17
19
Penetration testing is only permitted on the customer's *own* hosting space. Testing must not extend to, or affect, any other part of the platform or infrastructure managed by either Hypernode, or other Hypernode customers..
18
20
19
21
## Requirements
22
+
20
23
Penetration testing is allowed under the following conditions:
21
24
22
-
* All pentests must be performed by a reputable, experienced, party.
23
-
* You will [inform us](https://www.hypernode.com/en/support/) at least 72 hours ahead of time, and let us know the time, source IP(s) and target of the pentest.
24
-
* If the pentest causes, or discovers, any server side issues, you will share the full report of the pentest with us afterwards. You will keep these findings confidential, untill we've had the opportunity to assess and address the issue.
25
+
- All pentests must be performed by a reputable, experienced, party.
26
+
- You will [inform us](https://www.hypernode.com/en/support/) at least 72 hours ahead of time, and let us know the time, source IP(s) and target of the pentest.
27
+
- If the pentest causes, or discovers, any server side issues, you will share the full report of the pentest with us afterwards. You will keep these findings confidential, untill we've had the opportunity to assess and address the issue.
25
28
26
29
We do not allow pentests that:
27
-
* Rely on Social Engineering.
28
-
* Perform Brute Force testing.
29
-
* Test (D)DoS protection or -resilience.
30
-
* Test Physical Security of Datacenters, Offices, etc.
31
-
* May cause permanent damage to hardware or equipment.
30
+
- Rely on Social Engineering.
31
+
- Perform Brute Force testing.
32
+
- Test (D)DoS protection or -resilience.
33
+
- Test Physical Security of Datacenters, Offices, etc.
34
+
- May cause permanent damage to hardware or equipment.
32
35
33
36
You may wish to add the source IP's of the pentest to the [Hypernode WAF allowlist](./../../best-practices/firewall/ftp-waf-database-allowlist.md), to prevent our automated systems from affecting the test.
34
37
35
38
## Security Waivers
39
+
36
40
Hypernode explicitly gives its customers permission to test their own Hypernode hosting environment. If your penetration testing partner still requires a signed waiver, please [contact us](https://www.hypernode.com/en/support/).
0 commit comments