What if you exploit my site?

Typically when we find something which is exploitable we will assess whether the impact  would negatively affect the service.

If we find a critical issue which we believe to be exploitable we will contact you in the first instance to confirm our finding and discuss how you would like us to proceed.

In most cases, we are able to successfully exploit the service without causing any negative impact. However, precautions are always recommended prior to testing to reduce the impact in the rare occasions something does fall over.

in Common Test FAQS