In the interview I did with Mark Russinovich last month (An Interview with Mark Russinovich on Windows Azure & Security), I asked Mark about customers doing penetration testing. Mark pretty much said it was ok as long as they were not attacking the platform, which is true. However, I have a quick point of clarification.