Unverified50% confidenceDecision RuleExact time
The boundaries of legal SRC testing are determined entirely by the enterprise's written authorization, and any operation beyond the testing scope constitutes a violation.
1
Sources
50%
Confidence
Long-term
Relevance
10/24/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedSRC bug hunting is legally authorized testing; the scope of vulnerabilities and testing rules are clearly defined by the platform or vendor, and operations beyond the scope may violate the law.74% similarUnverifiedIn the SRC context, the testing scope description published by the company and the written authorization email are the prerequisite basis for all testing behavior carried out by white hats.71% similarUnverifiedAny penetration test must have a written authorization agreement that clearly specifies the testing scope, time window, and permitted technical means65% similarUnverifiedThe core difference between SRC bug hunting and penetration testing is: SRC usually targets real production environments, testing must be within the authorized scope, and it emphasizes the real harm and reproducibility of vulnerabilities.64% similarUnverified该Agentic流程运转的前提是有严格的自动化测试作为最终保障，只有全部测试通过代码才能合并63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1093911API
curl https://kongchang.com/api/v1/knowledge/claims/1093911MCP
get_claim(id=1093911)