Security

資訊安全與漏洞通報

Security contact & vulnerability disclosure policy

資安聯絡窗口 Security contact: rudin@eaman.com.tw
使用語言 Languages: 中文、English
機器可讀格式 Machine-readable: /.well-known/security.txt（RFC 9116）

如何通報 How to report

若您發現本公司網站或系統的安全漏洞，請寄信至 rudin@eaman.com.tw，並盡量提供：受影響的網址或系統、問題說明、重現步驟，以及您的聯絡方式。

If you believe you have found a security vulnerability in our website or systems, please email rudin@eaman.com.tw with the affected URL or system, a description of the issue, steps to reproduce it, and how to reach you.

我們的承諾 Our commitment

於 5 個工作天內回覆確認收到通報。
We will acknowledge your report within 5 business days.
評估問題並告知處理進度，修復後通知您。
We will investigate, keep you informed, and let you know when it is fixed.
對善意通報者的身分保密，並在您同意下致謝。
We will keep your identity confidential and credit you if you wish.

善意研究原則 Good-faith research

依照本政策、以善意進行並通報的安全研究，本公司不會對研究者採取法律行動。請您：

僅測試您自己的帳號或資料，不存取、修改或刪除他人資料。
不進行阻斷服務（DoS）、社交工程、實體入侵或垃圾郵件測試。
在我們修復之前，不公開漏洞細節。

We will not pursue legal action against researchers who act in good faith and follow this policy. Please only test against your own accounts or data, do not access, modify or delete others' data, do not perform denial-of-service, social engineering, physical or spam testing, and give us reasonable time to fix the issue before any public disclosure.

適用範圍 Scope

本政策適用於 eaman.com.tw 及其子網域上由本公司營運的網站與服務。第三方服務（例如原廠網站）請直接向該廠商通報。

This policy covers websites and services operated by EA MAN ENTERPRISE CO., LTD. on eaman.com.tw and its subdomains. Please report issues in third-party services directly to their vendors.