This analysis describes what OneLogin's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This prohibition bars users from conducting security assessments—including standard penetration testing—on any Service-related systems.
You may not attempt to probe, scan, or test the vulnerability of any systems related to the Service, including by running penetration or load tests.
How other platforms handle this
You may not display any personal contact, banking, or peer-to-peer payment information, whether in relation to you or any other person (for example, names, home addresses or postcodes, telephone numbers, email addresses, URLs, credit/debit card...)
Bypass or ignore instructions contained in our robots.txt file that controls automated access to portions of our Services;
Send content created in Mailchimp through another service.
"...attempt to probe, scan or test the vulnerability of any systems related to the Service, including penetration or load tests...Excerpt from OneLogin's Terms of Service
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This prohibition bars users from conducting security assessments—including standard penetration testing—on any Service-related systems.
You may not attempt to probe, scan, or test the vulnerability of any systems related to the Service, including by running penetration or load tests.
ConductAtlas has identified this type of provision across 281 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OneLogin.