How to Scope a Security Test for a New Subdomain

A new subdomain can expose a different application, vendor service, or administrative interface. Testing without clear ownership and authorization can disrupt systems outside the intended scope.

What to check

Confirm DNS target, service owner, data sensitivity, hosting provider, authentication requirements, and written authorization. Identify excluded systems and safe testing windows.

Recommended next step

Document the in-scope hostnames, test limits, contacts, and reporting route before testing begins. Informatix Systems can help assess security testing scope and remediation.