Vulnerbility Scanning

[Swatyy]

I host a website using Netlify and have deployed on Github.

I wanted to perform a vulnerbility scan on this website as part of a project I got from my school. Is this something that is allowed?

I was wondering though if my IP is my own because as Netlify manages the infrastructure different websites hosted on Netlify may share the same IP addresses. Would it be possible for me to scan this website using the IP I got for it?

[nathanmartin]

@Swatyy See:

Security at Netlify

Last reviewed by Netlify Support: July 2023 Netlify believes that the Jamstack approach to building websites and apps offers clear security benefits by default, and we at Netlify take security extremely seriously as a matter of principle. Our operations and business are SOC-2 certified, our staff are trained on security current best practices, and we pay close attention to handling of your data and access to our systems. We also provide certificates via Let’s Encrypt to all customers who config…

Run Penetration Test

hiya @anmolmalik , Our sales team will reach out to you about appropriate plan levels for testing. For you and others who may come after, I wanted to clarify some things around such tests against Netlify: Our terms of service state that we require you to get previous written authorization from us to run such scans. Yes, we are aware that we cannot stop you from doing so no matter whether you have authorization or not. If your scan causes problems for our service or staff, we will take it o…

Request for a penetration test

I like to request permission for a penetration test for two websites, which are hosted at netlify. I regard here to this post. Thank you in advance!