ACME HQDemo work items and pages, made up for Emargen's demo. Not a real company.

Operations / OPS-46

Penetration test window: testers' addresses allowed through the WAF

Project: Operations
Type: Change
Status: Done Done
Priority: Medium
Reporter: Mira Holm <mira.holm@acme-hq.example>
Assignee: Oskar Lund <oskar.lund@acme-hq.example>
Labels: securitypenetration-test
Components: infrastructure
Created: 2 Oct 2026, 08:00 UTC
Updated: 9 Oct 2026, 15:00 UTC
Resolved: 9 Oct 2026, 15:00 UTC

Description

The yearly penetration test by an outside firm runs from 5 October to 9 October against the EU staging copy (Confluence SEC › Penetration test 2026).

The firm's addresses allowed through the WAF's rate rules for the window, on staging only.
Failed sign-in and lockout alarms muted for those addresses only.
Removed on Friday when the test ends.

Comments (1)

Oskar Lund · 9 Oct 2026, 15:00 UTC

Testers' addresses removed from the WAF and the alarms at 16:45. First read-out from the firm this afternoon: no critical findings.