Product Security Incident Response (PSIRT)

MiTwell has established a Product Security Incident Response Team (PSIRT) to receive, investigate, and address security vulnerabilities in our products. Our products are designed following the IEC 62443-4-1 secure development lifecycle, and our development process is certified to IEC 62443-4-1.

If you believe you have found a security vulnerability in one of our products, we welcome your report through the channel below. We investigate every report we receive and handle it under a coordinated disclosure policy.

Report a Vulnerability

Please email psirt@mitwell.com.tw. To help us respond quickly, please include:

Affected product model and firmware/software version

Description of the vulnerability and its potential impact

Detailed steps and procedures for reproducing the vulnerability

Your contact details so we can follow up

We will provide an initial response within 2 business days.

How We Handle Reports

  • We provide an initial response within 2 business days.
  • We investigate and assess the risk level, then determine the remediation timeline accordingly.
  • We do not disclose vulnerability details publicly until a fix or mitigation is available, in order to protect users. If a vulnerability is already widely known or actively exploited, we will accelerate our response and disclose as appropriate.
  • We will not pursue legal action against researchers who report in good faith, follow this policy, and do not damage data or disrupt services.
  • With the reporter's consent, we will provide credit in the resulting advisory.

This policy is based on our secure development and defect management processes, which are certified to IEC 62443-4-1.

Recent Security Advisories

There are currently no published security advisories.