Exclusions
These are excluded or out of scope for security testing at this time
DDOS attacks. The test server is not configured for high scale operation and is not expected to withstand DDOS attacks. This includes simply creating millions of database entities.
Attacks on 3rd party service providers: e.g Auth0 attacks. We use Auth0 for authentication. attempts to attack Auth0 without their permission might result in you being blocked or sued.