Was wir niemals tun

• Denial of Service (DoS) or any activity that could disrupt website availability
• Brute force attacks or credential guessing of any kind
• Social engineering, phishing, or employee targeting
• Payment bypass testing or transaction manipulation attempts
• Destructive tests or any activity that could modify data
• Accessing, downloading, or attempting to view private data
• Port scanning or network vulnerability scanning
• Exploiting vulnerabilities or running any exploit code
• Testing without explicit written permission — ever
• Sharing or publishing client data, findings, or reports without consent
• Installing or uploading any files to client servers
• Using automated vulnerability scanners against client websites