Security Contact Form

Note on anonymous reports

We also accept and evaluate anonymous reports as part of our CVD process. However, without a way to contact you, we cannot send a confirmation of receipt, ask follow-up questions, provide updates on the status of the case, or coordinate disclosure with you. This may delay the processing of your report or make a thorough evaluation more difficult.

EasternGraphics follows a structured process for handling security reports.

If you have provided contact information, we will confirm receipt of your report, notify you if we have any questions, keep you updated on key steps in the process, and coordinate the disclosure with you.

• acknowledgement of receipt: generally within 7 calendar days
• initial qualified response: generally within 14 calendar days
• status communication: at reasonable intervals for confirmed and actively handled reports
• coordinated disclosure: generally only after a fix or appropriate mitigation is available

Your information will be used solely to address the reported security vulnerability and to carry out our CVD process. For more information, please see our Privacy Policy.