Security Testing Notice

This site is a self-contained, authorized security assessment environment. It is not a real store and processes no real payments or personal data.

You are welcome to probe it for vulnerabilities as part of an evaluation you've been invited to. Please avoid automated scanning that could degrade the site for other visitors (heavy brute-forcing, denial-of-service style traffic), and do not attempt to access infrastructure outside this application.

Document what you find in your own written report rather than in this application.