Most major providers now permit customer-authorised penetration testing of your own environment, though some activities carry specific rules. We handle this as part of scoping, ensuring all testing stays within your provider’s acceptable use policies.