IEI Joins the National Product Vulnerability Hunting Program as a Blue Team Member

Taipei — November 10, 2025 IEI Integration Corp. (“IEI”) today announced it has officially joined the Product Cybersecurity Vulnerability Hunting Program as a Blue Team participant, and has nominated its iVEC Virtualization Edge Computer and iRM Remote Management Platform as test targets.

Under a formal safe-harbor framework, IEI will collaborate with Taiwan’s white-hat security community to continuously validate product security, accelerate vulnerability remediation, and make security a built-in pillar of product competitiveness.

“IEI has long been committed to availability and strong governance across OT and IoT environments,” said Henry Du, Vice President of R&D at IEI. “By joining the Vulnerability Hunting Program, we are integrating external white-hat experts into our product lifecycle to detect issues earlier, accelerate remediation, and ultimately reduce our customers’ operational risk.”

Key Participation Highlights

• Program governance and workflow

  IEI will follow the program’s official guidelines to define eligible test scopes, provide test targets, receive and verify vulnerability reports, implement fixes, and publish coordinated disclosures. All research activities conducted within the authorized scope are protected by safe-harbor provisions.

• Integrated internal–external collaboration

  IEI is institutionalizing an “external reporting, internal triage and fixing, verification, and release” process as part of its regular product lifecycle, enhancing the speed and transparency of remediation while ensuring that customer operations remain uninterrupted.

IEI In-Scope Products

• iVEC Virtualization Edge Computer

  The iVEC Virtualization Edge Computer is an edge platform engineered for industrial environments, consolidating high-performance computing and multiple virtual machines onto a single hardware platform. It enables concurrent operation of heterogeneous operating systems and industrial applications, reducing device footprint and duplicated resources. With web-based remote desktop access, serial and TCP/IP connectivity, automated VM backup and recovery, and support for AI workloads at the edge, iVEC helps customers centrally manage distributed assets while enhancing system availability and resilience.

• iRM Remote Management Platform

  The iRM Remote Management Platform combines an industrial-grade mini server with a centralized management platform for harsh enviroments. It supports both Linux and Windows, and offers remote desktop, power control, out-of-band style monitoring capabilities via IPMI module (iRIS2), log and status collection, alerting, and integration with RAID and security features for data protection. iRM enables rapid fault diagnosis, lowers maintenance costs, and builds a highly available, easy-to-manage edge infrastructure for large-scale deployments.

IEI’s Security Commitment & Governance Framework

• IEI PSIRT & FIRST membership
  The IEI Product Security Incident Response Team (PSIRT) is a member of FIRST, collaborating with global incident response teams to share threat intelligence and best practices, and to enhance IEI’s incident handling capabilities.
• Dedicated Security Advisories Portal
  IEI maintains an official advisories page to provide timely information on identified vulnerabilities, impact scope, remediation plans, and mitigation guidance, helping users respond quickly and confidently.
• IEI Product Vulnerability Disclosure Policy
  A formal disclosure policy defines assessment criteria, handling procedures, communication channels, and publication principles to ensure vulnerabilities are processed in a structured and transparent manner.
• Vulnerability Reward Program
  IEI operates a tiered reward program that accepts qualified vulnerability reports related to IEI system software products and web services. The program encourages participation from researchers and the white-hat community, strengthening the efficiency and transparency of the report–verify–fix cycle.

About the Product Cybersecurity Vulnerability Hunting Program

The Product Cybersecurity Vulnerability Hunting Program is announced by TWCERT/CC and operated under Taiwan’s national cybersecurity framework. It is designed to foster multi-stakeholder collaboration, identify and remediate product security risks at an early stage, and enhance the global competitiveness of domestic technology brands. For official information on program structure, team roles, registration, confidentiality and safe-harbor terms, and participation rules, please refer to twcert.org.tw