I need clarification on what we are permitted to perform vulnerability and penetration tests against
Summary:
Can we perform such tests against custom REST endpoints on the Integrations platform?
Content (please ensure you mask any confidential information):
According to the policy (Oracle Cloud Security Testing Policy), we cannot test the Oracle platforms (OCI) nor the Oracle products on those platforms (OIC) but we can test custom components on Oracle platforms.
There is a grey area for me as to whether or not we are permitted to test the custom REST API that we build in the Oracle product (OIC)
Version (include the version you are using, if applicable):
Code Snippet (add any code snippets that support your topic, if applicable):
0