-
Products
-
Computer-On-Module
- COM-HPC Modules
- COM Express & ETX Modules
- Qseven Modules
- SMARC Modules
- SODIMM SOMs
- MicroSOM Modules
- OSM
Industrial PC Products
- Single Board Computers (SBC)
- Industrial Backplanes
- Industrial Chassis
- Industrial Power Supplies
Embedded Computing
- Embedded Systems
- Mini-ITX Boards
- Mini-ITX Boards Low Power
- Nano-ITX Boards
- NUC Boards
- 3.5" ECX/Pico-ITX/Femto-ITX
- Industrial ATX/FlexATX/MicroATX Boards
Medical Computers
- Medical Computers
Gaming Appliances
- Gaming Appliances
Network Appliance
- X86 Platforms
- Network & Bypass Cards
- 4G LTE Modules
- LCD Modules
Server
- Servers
- Server Motherboard
INTELLIGENT SYSTEMS
- Industrial IoT Appliances
- Edge AI & Industrial GPU Computers
Human Machine Interfaces
- Medical Displays
- Medical Panel PCs
- Industrial Monitors
- Industrial Panel PCs
Industrial I/O
- Industrial I/O
- Contec Industrial I/O
INDUSTRIAL FLASH & MEMORY
- Industrial SSD
-
- Solutions
- Support Center
- Contact Us
- About Us
Cybersecurity Vulnerability Reporting
Portwell is committed to maintaining a rigorous, traceable, and continuously improving product cybersecurity vulnerability management program. We provide customers with reliable product security information, risk assessments, and practical mitigation guidance to reduce the potential impact of product vulnerabilities. The Product Security Incident Response Team (PSIRT) is Portwell’s dedicated function for receiving and managing product security incidents and vulnerability reports, including intake, technical validation, risk assessment, remediation coordination, and related disclosure activities.
Portwell continuously considers international standards, regulatory requirements, and recognized industry practices to strengthen its vulnerability-handling process and response capability. Through timely, responsible, and transparent coordination with researchers, customers, suppliers, and other stakeholders, we seek to improve the cyber resilience of industrial and embedded products and remain a trusted product-security partner.
Option 1: Secure Email
If your report includes highly sensitive supporting evidence (such as detailed logs or PoC test code), we strongly recommend using PGP encryption via email.
- Email: psirt@portwell.com
- Encryption: PGP Key Download
- Suggested Subject: [ CVD Report ] ( Product name ) / ( Model name )
Information to Include
Include the following information where available. This guide does not limit the submission of other information that may help Portwell assess the report.
- Reporter contact information: name, organization, and email address.
- Affected product: product name, model, hardware revision, and firmware or software version.
- Technical description: expected and actual behavior, known or potential impact, and affected security properties.
- Reproduction steps: required equipment, software, configuration, network environment, and sequence of actions where applicable.
- Supporting evidence: proof-of-concept material, screenshots, logs, packet captures, non-malicious test code, or other evidence.
- Potential exploitation: how an attacker could exploit the issue, prerequisites, and potential attack path.
- Additional context: any information that may clarify scope, impact, or remediation options.
Safe and Responsible Reporting
Use only accounts, devices, and data that you own or are authorized to use. Minimize impact, stop testing if personal, confidential, credential, or customer data is encountered, and keep non-public findings confidential until coordinated disclosure.
※ Please do not include passwords, credentials, unnecessary personal data, customer data, or destructive test material in your report.
Option 2: Online Submission Form
