Clear scope • Non-disruptive • No permission means no testing

Rules of Engagement

Atlas Central only works with written permission. No assessment begins without written authorization and a clearly defined scope.

Core principle

No permission means no testing.

Atlas Central is designed for practical, documented and non-disruptive security reviews for small businesses.

Allowed activities

✓ Public website review
✓ Basic security configuration checks
✓ Exposed login/admin surface review
✓ Public information disclosure checks
✓ Basic API surface observations
✓ Security header review
✓ HTTPS and redirect checks
✓ Outdated technology indicators
✓ WordPress security observations
✓ AI and data privacy workflow review

Not allowed

✕ Testing without written permission
✕ Out-of-scope testing
✕ Denial-of-service testing
✕ Social engineering
✕ Credential theft
✕ Private data download or modification
✕ Payment bypass
✕ Employee targeting
✕ Destructive action
✕ Phishing or spam