The JD Security Response Center (JSRC) has announced a temporary suspension of all external authorized security testing and vulnerability reporting. The measure is in effect from October 18, 2026, at 0:00 until November 18, 2026, at 10:00.
The company stated that the decision aims to ensure system stability during the peak traffic period of the Double 11 shopping festival. JD noted that recent unauthorized testing using AI tools has caused disruptions to its production environment, creating risks that the company cannot accommodate during high-load operations.
The suspension covers all of JD's products, business systems, and related assets. During this period, the JSRC will stop accepting vulnerability reports. Any unauthorized testing conducted during this timeframe will be treated as a violation of company policy.
JD warned that violators may face account restrictions or bans. Furthermore, the company reserves the right to pursue legal action against individuals whose testing activities lead to system anomalies or service disruptions, citing compliance with national cybersecurity and data protection laws.
