Testing: check prohibited actions
Conducting penetration testing on the Gateway API without proper authorization may result in legal action and service disruption. We advise you to contact our Merchant Support Team to obtain permission before performing any penetration testing activities.
Prohibited actions include:
❌ Penetration testing of any Gateway services
❌ Load testing
❌ Exploiting common security vulnerabilities
❌ Injecting malicious data
❌ Bypassing validation and security checks
❌ Subverting ACLs and user permissions
❌ Port scanning and service discovery
❗ Usage of ping/traceroute - acceptable for short-term debugging purposes
