Authorized pentesting
Define permission and scope before any active HTTP check.
Updated October 31, 2026
Pentest
Bounded HTTP checks require a confirmed operator, authorized origins, exclusions and an active time window of at most 24 hours. The current gateway permits one GET or HEAD request, no redirects and no concurrent requests. Production targets must resolve to public IP addresses. Runtime availability is checked before tool selection; no arbitrary scanner, shell or private-network access is promised.
Interpret the result
Keep model suggestions separate from tool observations. Preserve the source and limitations, then independently verify the conclusion before treating it as a confirmed finding.