Yes, You Really Can

I thought today would be a good day to remind you about Microsoft's stance on customer validation of the security of our online services. In addition to the numerous certifications and audits performed on our services, Microsoft has a bug bounty program for finding security vulnerabilities, and allows customers to carry out authorized penetration testing of Microsoft Azure after coordinating with us. Details about all of Microsoft's bug bounty programs can be found here.