Do you require pre-approval for a pen test?


We are scheduling a pen test of our app (not specifically fly but it’s hosted on fly) and I was wondering if you require pre-approval and if so what form do I need to complete.

Many thanks,


Hey Matt,

Generally speaking, we don’t require pre-approval for testing. We don’t allow testing that’s disruptive to the service (read: DDoS or equivalent) or that targets our infrastructure or services. But for testing your app, we’re fine with that without needing any approvals. Thanks for checking! :slight_smile:

1 Like