topic ESRI Webportal based app- testing tools in Implementing ArcGIS Questions https://community.esri.com/t5/implementing-arcgis-questions/esri-webportal-based-app-testing-tools/m-p/28680#M57 <HTML><HEAD></HEAD><BODY><P><SPAN style="background-color: #ffffff;">Hi everyone. Which tools are recommended for testing web applications based on ESRI Web portal? Is it possible to perform penetration testing? Thank you</SPAN></P></BODY></HTML> Thu, 18 Jun 2020 02:29:41 GMT esritest 2020-06-18T02:29:41Z ESRI Webportal based app- testing tools https://community.esri.com/t5/implementing-arcgis-questions/esri-webportal-based-app-testing-tools/m-p/28680#M57 <HTML><HEAD></HEAD><BODY><P><SPAN style="background-color: #ffffff;">Hi everyone. Which tools are recommended for testing web applications based on ESRI Web portal? Is it possible to perform penetration testing? Thank you</SPAN></P></BODY></HTML> Thu, 18 Jun 2020 02:29:41 GMT https://community.esri.com/t5/implementing-arcgis-questions/esri-webportal-based-app-testing-tools/m-p/28680#M57 esritest 2020-06-18T02:29:41Z Re: ESRI Webportal based app- testing tools https://community.esri.com/t5/implementing-arcgis-questions/esri-webportal-based-app-testing-tools/m-p/28681#M58 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>There are a few ways to think about this: ArcGIS Enterprise and ArcGIS Online.&nbsp;</P><P></P><P>For ArcGIS Enterprise, please review the automated scanning guidance here:</P><P></P><P><A class="link-titled" href="https://trust.arcgis.com/en/customer-documents/ArcGIS%20Enterprise%20Vulnerability%20Scanning%20Guidance.pdf" title="https://trust.arcgis.com/en/customer-documents/ArcGIS%20Enterprise%20Vulnerability%20Scanning%20Guidance.pdf">https://trust.arcgis.com/en/customer-documents/ArcGIS%20Enterprise%20Vulnerability%20Scanning%20Guidance.pdf</A>&nbsp;</P><P></P><P>Esri does not recommend specific tools for pentesting. That's up to your discretion and the scope of testing defined by the customer.</P><P></P><P>For ArcGIS Online,&nbsp;pentesting and automated scanners are prohibited for ArcGIS Online (ArcGIS.com) without Esri’s explicit consent under our terms of use. Use of automated tools may result in investigative action or your IP(s) being blocked. ArcGIS.com users who wish to perform this level of testing should first reach out to their account teams to obtain a Security Assessment Agreement (SAA).&nbsp;</P></BODY></HTML> Tue, 28 Jul 2020 17:00:58 GMT https://community.esri.com/t5/implementing-arcgis-questions/esri-webportal-based-app-testing-tools/m-p/28681#M58 RandallWilliams 2020-07-28T17:00:58Z