My project uses railway.com . Students from University of [State] are doing a their undergraduate senior capstone, for the cybersecurity class.

Since our project is on your infrastructure and completely dependent on it, and these students might want to do a vulernability scan on our network, would this be fine on your side?

They would do a vulnerability scan on our railway.app project.

Is there anything we should be worried about or some constraints we need to provide for the student's scans?