Security Vulnerability Report

1. Fill out the form below (Recommended)
2. Report by phone: (02)-5590-8050

We take the security of our hardware products and cloud ecosystem seriously. Please adhere to the following guidelines when conducting security research:
● Permitted Activities:
● Hardware analysis, firmware extraction, or security testing on devices owned by you.
● Vulnerability research targeting authorized cloud APIs, web portals, or mobile applications.
● Strictly Prohibited Activities (Out of Scope):
● Denial of Service (DDoS/DoS): Any testing that impairs, degrades, or disrupts our cloud infrastructure, servers, or networks.
● Social Engineering: Phishing, spamming, or pretexting directed at our employees, partners, or users.
● Data Destruction & Privacy Violations: Accessing, modifying, deleting, or exfiltrating data belonging to other users. If you encounter user data, stop immediately and report it.
● Physical Destruction or Hazards: Physical attacks on non-owned devices or tests that cause safety risks (e.g., thermal, high voltage).
● Spam & Automated Abuse: Volumetric automated scanning or spamming of form endpoints.

● Legal Safe Harbor: If you conduct security research in good faith and strictly comply with this policy, we will not initiate legal action (civil or criminal) against you or contact law enforcement regarding your research.
● Coordinated Disclosure: To protect our users, we ask that you keep all vulnerability information confidential and refrain from public disclosure until we have addressed the issue or agreed on a disclosure timeline.
● Third-Party Claims: If a third party initiates legal action against you for research conducted in compliance with this policy, we will make it known that your actions were performed under our vulnerability disclosure framework.