Allowing a scanner or tester’s IP addresses
Our security systems block traffic that looks like an attack, and a vulnerability scan or penetration test looks like one. If your scanning or testing company needs to reach your site or server without being blocked, we can allow their IP addresses through. There’s no charge.
What an allowlist entry covers
When we allow an address, it’s let through:
- the server firewall
- the web application firewall
- automatic bans after failed logins
- filtering at the edge of our network
Your tester will then see your site or server without our protections in the way. Their results show what’s there behind those protections, which can include things the public can’t reach.
How long it lasts
For as long as your test or scan needs, which can be several days. We don’t add permanent entries. For recurring scans, such as quarterly PCI scans, open a ticket before each one.
What to send us
Open a ticket with:
- the IP addresses or ranges to allow, IPv4 and IPv6
- the domains or servers they’ll be testing
- the dates and times the entry needs to be in place
- any specific requirements from your testing or scanning company
Testing companies’ requirements vary, so include anything they’ve asked for and we’ll set it up to match.
ULTRA Cloud Panel customers
If you’re on ULTRA Cloud Panel, you can add your tester’s addresses yourself under Trusted IPs in the control panel. Open a ticket if you need a hand.
Shared hosting
On shared hosting, allowing a tester’s addresses doesn’t change the rules for testing. See our penetration testing article for what’s allowed on shared servers.