We understand that penetration tests are in the interest of the client to assess the security of their data when processed by service providers. However, without prior notice and coordination with us, pentests are considered attacks on our services (we lack the context). We actively take measures against them, which can involve both technical and legal aspects.
To avoid any misunderstandings, it is therefore necessary to clarify the following points in advance:
- Date of the pentest?
- Scope of the pentest?
- What types of tests does the client intend to perform?
- Is there a possibility of impact on our production systems ("destructive tests," DoS, DDoS)?
- How many tests will the client conduct?
- From where (IP or IP range) will the test be conducted?
Please contact our support at support@hornetsecurity.com and inform us about the penetration test with the points mentioned above. Additionally, we expect to be provided with the test results.