Security Testing for Applications on CStack

If you are planning to conduct security testing or VAPT for your applications hosted on CStack, please follow these guidelines:

1. Notify the CStack Team in advance

Inform the CStack platform team via enquiries_cstack@tech.gov.sg or reach the team via Slack, providing advance notice of the planned security testing.

This process allows our team to distinguish between authorised security assessments and potential security threats, ensuring smooth operations and preventing false alarms.

2. Ensure that the testing scope is focused on application

Ensure that the testing scope focuses solely on the application and excludes infrastructure testing. The infrastructure is managed by CStack and is outside the scope of application-specific security assessments.