Can we run a penetration test as part of our security review?
Coordinate the test with Passcreator in advance. Passcreator does not permit tests against the production system without agreement. Run the test against the staging environment at staging.passcreator.com.
The API enforces a rate limit of 600 requests per minute, stricter on the login endpoint. This limit blocks most scanners unless we relax it for an agreed time window.
Checked 2026-09-01 · Support