All Products
Search

This Product

    Security Control:Apply for a penetration test license

    Document Center

    Security Control:Apply for a penetration test license

    最終更新日:Jun 03, 2026

    Obtain a penetration test license before testing your Alibaba Cloud resources.

    Guidelines

    Submit the application with your own Alibaba Cloud account, or your application form cannot be completed. If you commission a third party to run the tests, obtain the license first and then notify the third party.
    Important You can conduct penetration tests only on the resources that you own. You are strictly prohibited from testing resources owned by other Alibaba Cloud services or by Alibaba Cloud.
    If you discover potential security risks affecting Alibaba Cloud or other Alibaba Cloud services during testing, report them to Alibaba Cloud within 24 hours by email (security@service.alibaba.com) with risk details attached. Do not disclose these risks publicly or to third parties for 90 days. Alibaba Cloud keeps all information you provide confidential and will not share it without your permission.
    Note When the penetration test license expires, authorization automatically terminates.
    • Early test termination: If you have finished the tests early, terminate the application record early.
    • Test extension: To extend the penetration test license, submit an application for the license again.

    Procedure

    1. Log on to the Alibaba Cloud Security Control console.
      Note Hover over the account icon in the upper-right corner of the Alibaba Cloud console and click Security Console.
    2. Choose Apply > Penetration Test Permission, then click Apply for penetration test permission.
    3. Select the IP address type: Classic public IP (ECS instances), VPC public IP (public IP addresses or EIPs of ECS instances in VPCs), or Server Load Balancer (SLB public IP addresses). Enter the asset IP addresses. The IP addresses must belong to your current Alibaba Cloud account. Click OK.
      Note You can enter a maximum of 10 IP addresses.
    4. Click Next and fill out the application form: test start and end dates, source IP address, test content, and test procedures.
    5. Click OK to submit the application. You will typically receive a reply within one business day.
      Note To end the test early, select the application record on the penetration test license page and click Early termination.