Hi so I’m new in using Netlify for a project in school, I’m deploying a static website for a local community. Can I use ZAP Penetration Testing to my own hosted site? I’ve already asked the Netlify AI and said it’s okay but I want an answer to those who did already try. Thanks
@aaaaay Seems like the usual case of an AI answering with authority but being incorrect.
See:
Also for a more recent example this thread, which had the same outcome (it’s ‘Enterprise Only’):
https://answers.netlify.com/t/penetration-test-request/96118
thanks for the info but I accidentally clicked the run scan on the ZAP app because the Netlify AI said its okay what will happen to my account then?? I’m very sorry for that
@aaaaay Presumably nothing will happen.
Although I can’t say for certain, since I don’t work for Netlify, so I have precisely no idea.
I’m just providing what I know to be the correct answer.
Hey! Quite interesting that our AI provided that response, looks like we’re going to have to do some revision on the bot! Glad to know about this.
It is, as Nathan mentioned, against our terms of use to perform penetration tests on the self-serve subscription level. These can result in sites getting shut down, so I recommend not performing it again now that you know!
Let me know if you have any other questions. Thanks!