The Open Hack Policy (OHP), grants an ethical hacker permission to practice their penetration testing skills or new shiny tools on a participating domain.  Vulnerabilities found via the OHP should be credited to the individual that discovered them on the site’s OHP page. If you run a website and/or domain, and the policy seems to be a good match for you then you are encouraged to use the OHP on your domain(s) and make sure to let us know what work and what doesn’t for you so we can update the policy accordingly.  The OHP should be a living document and will be continually updated and improved. The Goal behind the OHP is to promote ethical hacking and responsible disclosure to domain operators that want to opt-in the OHP. Collaboration between ethical hackers and domain operators should be beneficial to both parties.

More details on the OHP: Open Hack Policy.