Do I need permission to perform a penetration test for a site hosted on cloudflare pages?
I could only find some discussion in Cloudflare community regarding this topic and no official statement.
Is there an official statement / page talking about this topic?
As far as I remember, you do not need authorization from Cloudflare to conduct this penetration test.
Keep in mind though, If you test the infrastructure, you’d be testing Cloudflare’s and that might need some permission, respectively might not be appreciated at all.
I believe the best way would be to contact Cloudflare support in this case.
The Cloudflare Public Bug Bounty Bug Bounty Program enlists the help of the hacker community at HackerOne to make Cloudflare Public Bug Bounty more secure. HackerOne is the #1 hacker-powered security platform, helping organizations find and fix...
Is this somewhere documented? As much as I am thankful for your response, I guess a post in forum does not represent a legal statement.
