---
id: 7988
title: "To Add Value to Your Penetration Testing, Allow List Source IPs"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/executive-blog/security-industry-trends/allow-list-ip-penetration-testing/"
published_at: "2021-06-22T00:00:00Z"
tags: ["waf", "penetration-testing", "methodology", "ips", "allowlisting"]
phying_url: "https://phying.com/item/7988"
lang: en
---

# To Add Value to Your Penetration Testing, Allow List Source IPs

## Summary

Why clients should allowlist pentester source IPs: pentests emulate rather than simulate attackers, and IPS/WAF bypasses are publicly documented, so blocking tester IPs just wastes engagement time.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2021-06-22T00:00:00Z
- **Original:** https://www.netspi.com/blog/executive-blog/security-industry-trends/allow-list-ip-penetration-testing/
- **Phying News:** https://phying.com/item/7988