[{"data":1,"prerenderedAt":419},["ShallowReactive",2],{"global-en":3,"products-nav-en":73,"page-faq-en":186},{"data":4,"meta":72},{"id":5,"documentId":6,"siteName":7,"companyName":7,"address":8,"phone":9,"email":10,"youtubeUrl":11,"footerNote":12,"createdAt":13,"updatedAt":14,"publishedAt":15,"locale":16,"fax":17,"servicePhone":18,"nav":19,"footerLinks":52,"defaultSeo":69},3,"dxbxf36qx9vr7mj1xw4ffkgk","RAPIXUS Inc.","4F.-10, No. 213, Chaofu Rd., Xitun Dist., Taichung City, Taiwan","04-22025688","service@rapixus.com","https:\u002F\u002Fwww.youtube.com\u002F@rapixus-2017","Your trusted brand for security compliance.","2026-11-10T11:20:50.338Z","2026-11-11T06:44:17.731Z","2026-11-11T06:44:17.713Z","en","04-22540101","0931-611-688",[20,26,32,37,42,47],{"id":21,"label":22,"url":23,"autoProducts":24,"children":25},63,"Products",null,true,[],{"id":27,"label":28,"url":29,"autoProducts":30,"children":31},64,"News","\u002Fnews",false,[],{"id":33,"label":34,"url":35,"autoProducts":30,"children":36},65,"About","\u002Fabout",[],{"id":38,"label":39,"url":40,"autoProducts":30,"children":41},66,"Contracts","\u002Fcontracts",[],{"id":43,"label":44,"url":45,"autoProducts":30,"children":46},67,"Vulnerability Report","\u002Ffaq",[],{"id":48,"label":49,"url":50,"autoProducts":30,"children":51},68,"Customers","\u002Fcustomers",[],[53,57,61,65],{"id":54,"label":55,"url":56},105,"Terms of Use","\u002Fterms",{"id":58,"label":59,"url":60},106,"Privacy Policy","\u002Fprivacy",{"id":62,"label":63,"url":64},107,"Security Policy","\u002Fsecurity-policy",{"id":66,"label":67,"url":68},108,"Personal Data Protection","\u002Fpersonal-data-protection",{"id":70,"metaTitle":7,"metaDescription":71,"ogImage":23},678,"RAPIXUS develops security products: GCB, VANS, smart deployment, Zero Trust, MDR and RapixCloud.",{},{"data":74,"meta":182},[75,89,103,112,125,137,146,160,173],{"id":76,"documentId":77,"name":78,"slug":79,"tagline":80,"summary":81,"sort":82,"category":83},142,"z83gnegvbr4okdj5ojh99jtb","RapixEngine","rapixengine","One console, many modules","RapixEngine integrates configuration audit, vulnerability management, endpoint deployment, IT asset and device control in a single console, with a proprietary algorithm to reduce deployment traffic and exclusive troubleshooting tools.",10,{"id":84,"documentId":85,"name":86,"slug":87,"sort":88},4,"ippx22ml5vu70xeffyydoczc","Platform","core",1,{"id":90,"documentId":91,"name":92,"slug":93,"tagline":94,"summary":95,"sort":96,"category":97},144,"qpvyybjnup7jx9bn6t7qm2je","Government Configuration Baseline (GCB)","gcb","Uniform security settings, compliance made easy","GCB regulates the uniform security settings of ICT devices, such as password length and update periods, to reduce the risk of devices becoming entry points for attacks.",20,{"id":98,"documentId":99,"name":100,"slug":101,"sort":102},6,"jitu99m1ejstbncvf9to97vy","Endpoint Configuration","policy",2,{"id":104,"documentId":105,"name":106,"slug":107,"tagline":108,"summary":109,"sort":110,"category":111},146,"xcpg4m9gkn8bedpap3jg89nz","Financial Configuration Baseline (FCB)","fcb","Configuration baseline compliance for finance","The RapixEngine Policy audit module supports FCB checks for financial institutions.",30,{"id":98,"documentId":99,"name":100,"slug":101,"sort":102},{"id":113,"documentId":114,"name":115,"slug":116,"tagline":117,"summary":118,"sort":119,"category":120},148,"igvlzvwg87lswchz1eoaettb","Vulnerability Management (VANS)","vans","Stay ahead of vulnerabilities","The RapixEngine VANS module supports asset inventory, risk assessment and vulnerability remediation under the Cyber Security Management Act, with automatic CPE inventory and CVSS scoring.",40,{"id":121,"documentId":122,"name":123,"slug":124,"sort":5},8,"bj4duh6ty3crhjm4sc2kr74q","Vulnerability Management","vuln",{"id":126,"documentId":127,"name":128,"slug":129,"tagline":130,"summary":131,"sort":132,"category":133},150,"gfm4dit2cafdvhg6l48lkuva","IT Asset Management","itam","Delegated management and full HW\u002FSW inventory","Collect hardware and software information with the Agent, discover network devices, and manage assets by organisation.",50,{"id":82,"documentId":134,"name":135,"slug":136,"sort":84},"nosmiyv95pdgrsdio58re5ct","Endpoint Management","endpoint",{"id":138,"documentId":139,"name":140,"slug":141,"tagline":142,"summary":143,"sort":144,"category":145},152,"j7outkranauj3sdt22txpxbu","Deployment & Smart Tapping","deployment","The more you deploy, the more you save","Automated deployment of software, batch files, Windows patches and Unix shell scripts. A proprietary grouping algorithm and seed-computer streaming reduce console traffic.",60,{"id":82,"documentId":134,"name":135,"slug":136,"sort":84},{"id":147,"documentId":148,"name":149,"slug":150,"tagline":151,"summary":152,"sort":153,"category":154},154,"llsvi3h06jpah7ve2a97x8dh","EX+ User Control","ex-plus","License and device control, no AD required","Control software usage and licenses, record installation and usage, control USB, drives and Bluetooth, and use remote desktop, without an AD environment.",70,{"id":155,"documentId":156,"name":157,"slug":158,"sort":159},12,"plk9czc11faf3tahjn9snwcr","Device Control","device",5,{"id":161,"documentId":162,"name":163,"slug":164,"tagline":165,"summary":166,"sort":167,"category":168},156,"r8jtxsn7i0ll52185m41msuu","Zero Trust","zero-trust","Never trust, always verify","Beyond the traditional perimeter: every access is verified, with strong identity and device authentication and passwordless sign-in.",80,{"id":169,"documentId":170,"name":171,"slug":172,"sort":98},14,"h2lzkkrq1y8zx66o9fq81dp3","Identity & Threat Protection","advanced",{"id":174,"documentId":175,"name":176,"slug":177,"tagline":178,"summary":179,"sort":180,"category":181},158,"wmhrjrn7qwom631z77ueqfw1","MDR","mdr","Managed detection and response","24\u002F7 endpoint telemetry with real-time threat hunting, proactive monitoring, instant alerts and incident response.",90,{"id":169,"documentId":170,"name":171,"slug":172,"sort":98},{"pagination":183},{"page":88,"pageSize":184,"pageCount":88,"total":185},100,9,{"data":187,"meta":416},[188],{"id":189,"documentId":190,"title":191,"slug":192,"legacyUrl":193,"createdAt":194,"updatedAt":194,"publishedAt":195,"locale":16,"blocks":196,"seo":412},28,"dheglxdk53xlwd28y27a7q68","Report Vulnerability","faq","\u002Ffaq.php","2026-11-10T13:50:32.874Z","2026-11-10T13:50:32.888Z",[197,203],{"id":198,"eyebrow":199,"title":200,"subtitle":201,"__component":202},24,"Product Security","Security Vulnerability Reporting","Report security vulnerabilities in RAPIXUS products to security@rapixus.com. We follow responsible disclosure.","blocks.page-banner",{"id":82,"content":204,"__component":411},[205,211,216,220,228,232,236,240,244,248,252,256,260,264,268,301,305,309,317,321,325,329,337,341,345,349,353,357,361,365,369,373,377,385,403,407],{"type":206,"children":207},"paragraph",[208],{"text":209,"type":210},"Rapixus takes product security seriously and is committed to protecting our customers. If you discover a security vulnerability in any of our products, we encourage you to report it through the channel below. We will handle every report in accordance with our responsible disclosure principles.","text",{"type":212,"level":102,"children":213},"heading",[214],{"text":215,"type":210},"Contact",{"type":206,"children":217},[218],{"text":219,"type":210},"Dedicated security vulnerability reporting mailbox",{"type":206,"children":221},[222],{"url":223,"type":224,"children":225},"mailto:security@rapixus.com","link",[226],{"text":227,"type":210},"security@rapixus.com",{"type":206,"children":229},[230],{"text":231,"type":210},"This mailbox is exclusively for product security vulnerability reports and is managed by the PSIRT team.",{"type":212,"level":102,"children":233},[234],{"text":235,"type":210},"Scope",{"type":212,"level":84,"children":237},[238],{"text":239,"type":210},"Proprietary Software Products",{"type":206,"children":241},[242],{"text":243,"type":210},"All software products and services independently developed and publicly released by Rapixus",{"type":212,"level":84,"children":245},[246],{"text":247,"type":210},"Online Service Platforms",{"type":206,"children":249},[250],{"text":251,"type":210},"Online services, API interfaces, and cloud platforms operated by Rapixus",{"type":212,"level":84,"children":253},[254],{"text":255,"type":210},"Product Components",{"type":206,"children":257},[258],{"text":259,"type":210},"Proprietary components and core functional modules used within our products",{"type":212,"level":102,"children":261},[262],{"text":263,"type":210},"Recommended Information to Include",{"type":206,"children":265},[266],{"text":267,"type":210},"Providing the following details will help the PSIRT team complete its assessment more quickly and deliver remediation or mitigation guidance sooner:",{"type":269,"format":270,"children":271},"list","unordered",[272,277,281,285,289,293,297],{"type":273,"children":274},"list-item",[275],{"text":276,"type":210},"1 Server and client version numbers",{"type":273,"children":278},[279],{"text":280,"type":210},"2 Browser version (if applicable)",{"type":273,"children":282},[283],{"text":284,"type":210},"3 Devices and software required to reproduce the issue",{"type":273,"children":286},[287],{"text":288,"type":210},"4 Steps to reproduce the issue (screenshots or code snippets are welcome)",{"type":273,"children":290},[291],{"text":292,"type":210},"5 Proof-of-concept (PoC) or exploit code",{"type":273,"children":294},[295],{"text":296,"type":210},"6 Packet capture of the attack traffic",{"type":273,"children":298},[299],{"text":300,"type":210},"7 Any other relevant information",{"type":212,"level":102,"children":302},[303],{"text":304,"type":210},"What Happens After You Report",{"type":212,"level":84,"children":306},[307],{"text":308,"type":210},"Acknowledgement",{"type":206,"children":310},[311,313,315],{"text":312,"type":210},"We will confirm receipt of your report within ",{"bold":24,"text":314,"type":210},"5 business days",{"text":316,"type":210}," and assign a case number so you can track the progress of your submission.",{"type":212,"level":84,"children":318},[319],{"text":320,"type":210},"Technical Validation & Assessment",{"type":206,"children":322},[323],{"text":324,"type":210},"Our engineering team will verify the vulnerability and assess the risk level using CVSS scoring to determine remediation priority. We will keep you informed throughout this stage.",{"type":212,"level":84,"children":326},[327],{"text":328,"type":210},"Remediation & Notification",{"type":206,"children":330},[331,333,335],{"text":332,"type":210},"We will notify you once the fix is complete. ",{"bold":24,"text":334,"type":210},"High-severity vulnerabilities (CVSS 7.0+)",{"text":336,"type":210}," will be prioritized and addressed within 14 business days; medium and low severity issues will be scheduled into regular update cycles.",{"type":212,"level":84,"children":338},[339],{"text":340,"type":210},"Public Advisory",{"type":206,"children":342},[343],{"text":344,"type":210},"Depending on severity and impact, we will publish a formal security advisory and request or assist with a CVE assignment where applicable. Whistleblower information will be acknowledged or recognized for honorary contribution according to the reporter’s preference, and no additional cash rewards will be provided.",{"type":212,"level":102,"children":346},[347],{"text":348,"type":210},"Our Commitments",{"type":206,"children":350},[351],{"text":352,"type":210},"Reporter Confidentiality",{"type":206,"children":354},[355],{"text":356,"type":210},"We will not disclose your personal information or contact details to any third party without your explicit consent.",{"type":206,"children":358},[359],{"text":360,"type":210},"90-Day Disclosure Principle",{"type":206,"children":362},[363],{"text":364,"type":210},"We commit to completing remediation and publishing an advisory within 90 days. If more time is needed, we will proactively explain the reason and work with you on a revised timeline.",{"type":206,"children":366},[367],{"text":368,"type":210},"Ongoing Communication",{"type":206,"children":370},[371],{"text":372,"type":210},"We will provide regular updates throughout the remediation process so you are always aware of the current status of your report.",{"type":212,"level":102,"children":374},[375],{"text":376,"type":210},"Responsible Disclosure Policy",{"type":206,"children":378},[379,381,383],{"text":380,"type":210},"Thank you for helping us improve product security. To ensure every vulnerability is handled properly and to ",{"bold":24,"text":382,"type":210},"protect all users",{"text":384,"type":210},", please follow the guidelines below when submitting your report:",{"type":269,"format":270,"children":386},[387,391,395,399],{"type":273,"children":388},[389],{"text":390,"type":210},"Please do not publicly disclose technical details or exploit information until we have completed remediation and published an advisory.",{"type":273,"children":392},[393],{"text":394,"type":210},"Where possible, please include: the affected product name and version, steps to reproduce the issue, and a description of your testing environment — this helps us investigate faster.",{"type":273,"children":396},[397],{"text":398,"type":210},"Please avoid accessing, modifying, or deleting any customer data during your research.",{"type":273,"children":400},[401],{"text":402,"type":210},"Please limit your actions to what is strictly necessary to confirm the existence of the vulnerability, and do not exploit it further.",{"type":212,"level":84,"children":404},[405],{"text":406,"type":210},"Security Acknowledgements — Hall of Fame",{"type":206,"children":408},[409],{"text":410,"type":210},"We appreciate every researcher who helps make our products more secure. With your permission, we will credit your contribution in our public security advisories. Anonymous submissions are also welcome.","blocks.rich-text",{"id":413,"metaTitle":414,"metaDescription":415,"ogImage":23},508,"Report Vulnerability | RAPIXUS Inc.","RAPIXUS PSIRT vulnerability reporting policy. Contact security@rapixus.com.",{"pagination":417},{"page":88,"pageSize":418,"pageCount":88,"total":88},25,1794412471095]