{"id":1451,"date":"2026-11-03T15:52:04","date_gmt":"2026-11-03T15:52:04","guid":{"rendered":"https:\/\/www.freethought.uk\/help\/?p=1451"},"modified":"2026-11-03T15:52:04","modified_gmt":"2026-11-03T15:52:04","slug":"allowing-a-scanner-or-testers-ip-addresses","status":"publish","type":"post","link":"https:\/\/www.freethought.uk\/help\/allowing-a-scanner-or-testers-ip-addresses\/","title":{"rendered":"Allowing a scanner or tester\u2019s IP addresses"},"content":{"rendered":"\n<p>Our security systems block traffic that looks like an attack, and a vulnerability scan or penetration test looks like one. If your scanning or testing company needs to reach your site or server without being blocked, we can allow their IP addresses through. There\u2019s no charge.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-an-allowlist-entry-covers\">What an allowlist entry covers<\/h2>\n\n\n\n<p>When we allow an address, it\u2019s let through:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>the server firewall<\/li>\n\n\n\n<li>the web application firewall<\/li>\n\n\n\n<li>automatic bans after failed logins<\/li>\n\n\n\n<li>filtering at the edge of our network<\/li>\n<\/ul>\n\n\n\n<p>Your tester will then see your site or server without our protections in the way. Their results show what\u2019s there behind those protections, which can include things the public can\u2019t reach.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"how-long-it-lasts\">How long it lasts<\/h2>\n\n\n\n<p>For as long as your test or scan needs, which can be several days. We don\u2019t add permanent entries. For recurring scans, such as quarterly PCI scans, open a ticket before each one.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-to-send-us\">What to send us<\/h2>\n\n\n\n<p>Open a ticket with:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>the IP addresses or ranges to allow, IPv4 and IPv6<\/li>\n\n\n\n<li>the domains or servers they\u2019ll be testing<\/li>\n\n\n\n<li>the dates and times the entry needs to be in place<\/li>\n\n\n\n<li>any specific requirements from your testing or scanning company<\/li>\n<\/ul>\n\n\n\n<p>Testing companies\u2019 requirements vary, so include anything they\u2019ve asked for and we\u2019ll set it up to match.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"scout_name-customers\">ULTRA Cloud Panel customers<\/h2>\n\n\n\n<p>If you\u2019re on ULTRA Cloud Panel, you can add your tester\u2019s addresses yourself under Trusted IPs in the control panel. Open a ticket if you need a hand.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"shared-hosting\">Shared hosting<\/h2>\n\n\n\n<p>On shared hosting, allowing a tester\u2019s addresses doesn\u2019t change the rules for testing. See our penetration testing article for what\u2019s allowed on shared servers.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Our security systems block traffic that looks like an attack, and a vulnerability scan or penetration test looks like one. If your scanning or testing company needs to reach your site or server without being blocked, we can allow their IP addresses through. There\u2019s no charge. What an allowlist entry&hellip;<\/p>\n","protected":false},"author":15,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16,31],"tags":[],"class_list":["post-1451","post","type-post","status-publish","format-standard","hentry","category-security","category-security-scans"],"_links":{"self":[{"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/posts\/1451","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/comments?post=1451"}],"version-history":[{"count":1,"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/posts\/1451\/revisions"}],"predecessor-version":[{"id":1452,"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/posts\/1451\/revisions\/1452"}],"wp:attachment":[{"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/media?parent=1451"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/categories?post=1451"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/tags?post=1451"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}