1. Website operator
EmbedHarbor is a brand under which software tools, information resources, and cybersecurity-related services are made available.
The website is operated by:
- Legal entity: Shanghai Weisha Technologies Co., Ltd.
- Registered Chinese name: 上海未鲨科技有限公司
- Country of incorporation: People's Republic of China
- Registered office: 10th Floor, Building 1, No. 188 Changyi Road, Baoshan District, Shanghai, China
上海市宝山区长逸路188号1幢10层 - Company registration identifier (Unified Social Credit Code):
91310113MAEGFWLF2L - Registration authority: Shanghai Baoshan District Administration for Market Regulation
上海市宝山区市场监督管理局 - Contact email: [email protected]
- Website: https://embedharbor.com
The Chinese legal entity named above is responsible for operating this website. EmbedHarbor is a brand name and is not represented as a separately incorporated legal entity.
The English company name is used for international communication and should be read together with the registered Chinese company name.
2. Purpose of this website
The website provides information about EmbedHarbor products and services relating to software supply-chain security, Software Bills of Materials (SBOMs), vulnerability management, security-related product documentation, trusted software delivery, and regulatory readiness.
Certain features may be offered as free online tools, open-source software, demonstrations, or hosted services.
Availability, technical capabilities, eligibility requirements, and contractual conditions may differ between products and features.
Scope
This notice applies to this website and the free browser tools. It does not apply to the EmbedHarbor product application (the hosted SaaS), which publishes its own terms and privacy notice. A hosted service is covered by this notice only where it expressly says so. Each of these texts is reviewed for scope before a new feature relies on it.
3. Information and regulatory references
Information published on this website is intended to support technical understanding, evaluation, and product-security workflows.
References to legislation, standards, regulatory obligations, vulnerabilities, or security practices are provided for informational purposes.
Unless expressly stated in a separate written agreement, EmbedHarbor does not provide legal advice, regulatory certification, conformity assessment, or independent security certification.
Using EmbedHarbor products or tools does not, by itself, demonstrate compliance with the EU Cyber Resilience Act, the GDPR, or any other applicable legal framework.
Users remain responsible for assessing their own legal and regulatory obligations and for obtaining professional advice where appropriate.
4. Intellectual property
Unless otherwise indicated, website text, graphics, visual design, product descriptions, software interfaces, and other original content are owned by or licensed to the website operator.
Third-party names, trademarks, product identifiers, vulnerability references, standards, and logos remain the property of their respective owners.
The use of third-party names is for identification, technical reference, or interoperability purposes and does not imply affiliation, endorsement, or sponsorship.
Software released under an open-source license is governed by the applicable license for that software. Such licenses are separate from the general website terms.
Nothing in this Legal Notice overrides the rights granted under an applicable open-source license.
5. Accuracy and availability
We seek to keep website information accurate and reasonably current. However, cybersecurity research, vulnerability intelligence, technical specifications, and regulatory guidance may change.
Information may be incomplete, outdated, or subject to correction.
Website content may be updated, replaced, or withdrawn, subject to applicable law and any binding contractual commitments.
Specific hosted services may be governed by additional service terms or written agreements.
6. External websites and third-party resources
The website may link to external resources, including standards organizations, software repositories, public vulnerability databases, and regulatory publications.
These resources are operated by independent parties.
We do not control their content, availability, privacy practices, or terms. A link does not, by itself, indicate endorsement.
7. Privacy and service terms
The handling of personal data is explained in the Privacy policy.
The contractual conditions governing eligible products and services are described in the Terms of service, together with any applicable product-specific or separately agreed terms.
8. Security and vulnerability reporting
We take the security of EmbedHarbor services seriously and welcome responsible reports of potential security vulnerabilities.
Security contact
Email: [email protected]
Suggested subject: Security Vulnerability Report
If you discover a potential security vulnerability affecting the EmbedHarbor website, applications, APIs, authentication systems, or other services operated by us, please contact us.
Where possible, include:
- A description of the suspected vulnerability.
- The affected service, page, endpoint, or component.
- Steps to reproduce the issue.
- The potential security impact.
- Relevant screenshots or technical evidence, without unnecessarily exposing sensitive information.
Please avoid accessing other users' data, disrupting services, or performing testing beyond what is necessary to identify and explain the issue. Do not submit passwords, private keys, or other secrets in ordinary email.
We will review received reports and may contact the reporter if additional information is needed. Investigation and remediation priorities will depend on the nature, severity, and potential impact of the reported issue.
This contact channel is intended for security issues affecting EmbedHarbor-operated services. It is not a substitute for reporting vulnerabilities in a customer's own products or for submitting regulatory incident notifications to public authorities. The security page describes how this website handles data.
For personal data protection inquiries, please refer to our Privacy Policy.
9. European regulatory contacts
Where applicable law requires us to designate a representative or additional regulatory contact in the European Union, the relevant information must be made available in accordance with that law.
10. Contact
Questions regarding the operator of this website, its content, or its legal notices may be sent to:
Shanghai Weisha Technologies Co., Ltd.
Email: [email protected]
Registered office: 10th Floor, Building 1, No. 188 Changyi Road, Baoshan District, Shanghai, China
上海市宝山区长逸路188号1幢10层