and must not launch attacks via forms. If the tester is looking at authenticated sections of the target, they must be an Origin customer with MyAccount access. The program also puts Origin Energy ...