2025
Environmental, Social and Governance (ESG) Report
360 Security Technology Inc.
Report Preface
This is the fourth Environmental, Social, and Governance (ESG) Report released by 360 Security Technology Inc. Prepared inaccordance with the principles of objectivity, standardization, transparency, and completeness, this Report provides acomprehensive disclosure of our practices and performance in environmental protection, social responsibility, and corporategovernance for the year 2025.
About the Report
The reporting period of this Report spans from January 1, 2025 to December 31, 2025. To enhance comparability andcompleteness, certain contents extend beyond this period.Reporting Period
This report focuses on 360 Security and covers the Company and its wholly-owned subsidiaries and controlled subsidiaries.Unless otherwise speci?ed, the scope of this report is consistent with that of the Company's consolidated ?nancial state-ments.
Report Scope
The information and data cited in this Report are sourced from of?cial documents and statistical data of 360 Security. Wesolemnly af?rm that the content of the report is true, accurate, and complete, with no false records or misleading state-ments, and we take full responsibility for the reliability of the report's content. All data in this report are rounded results, andindividual discrepancies are due to rounding effects.
Data Sources
This report is published in electronic format and can be accessed and downloaded from the Shanghai Stock Exchange(http://www.sse.com.cn) or the CNINFO website (www.cninfo.com.cn).In case of any discrepancy, the Simpli?ed Chinese version shall prevail.
Publication and AccessGuideline references
Regulation references:
Reporting Guidelines
Guidelines on Sustainability Reporting for Chinese Enterprises issued by the China Academy of Social Sciences (CASS-ESG 6.0)Global Reporting Initiative GRI Standards 2021United Nations Sustainable Development Goals (SDGs) 2030Sustainability Accounting Standards Board Standards (SASB Standards)General Requirements for Disclosure of Sustainability-related Financial Information (IFRS S1) and Climate-related Disclosures (IFRSS2) issued by the International Sustainability Standards Board (ISSB)
Guidelines No. 14 of Shanghai Stock Exchange for Self-Regulation of Listed Companies — Sustainability Report (Trial) (hereinafterreferred to as the Guidelines) issued by the Shanghai Stock Exchange (SSE)Guidelines No. 4 of Shanghai Stock Exchange for Self-Regulation of Listed Companies — Compilation of Sustainable DevelopmentReports (January 2026 Revision) issued by the SSE
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
The 2026 Government Work Report mentions “intelli-gence” and “security” multiple times, both marking asigni?cant increase compared with the previous year.For the ?rst time, the report introduced the concept of“new forms of smart economy,” and, in conjunction withthe deepening of the AI Plus Initiative, explicitly calledfor accelerating the adoption of next-generation intelli-gent terminals and agents, as well as fostering newforms and models of AI-native business. It also outlinedcomprehensive arrangements in areas such as energy,computing power, and data. These developmentsindicate that both “intelligence” and “security” havebeen rapidly permeating industries and sectors acrossthe board. At present, China’s arti?cial intelligenceindustry is gradually forming a coordinated “six-capabil-ity model” encompassing power, computing power,intelligence, human capital, security capability, andproductivity, thereby laying a solid foundation for theimplementation of the AI Plus Initiative. National strate-gic priorities and industry trends have presented uswith both a “new test” and a “new blueprint.” We haveconsistently adhered to the philosophy of “supportingsmall and micro businesses wherever they are,” lever-aging the dual engines of “AI + Security” to safeguardthe world with security and shape the future with AI,contributing our corporate strength to the developmentof the smart economy and the cultivation of new quali-ty productive forces.
Message from the ChairmanFirmly advancing the dual-track “AI + Security” strategy to contribute tothe intelligent economy
We have actively responded to China’s “Dual Carbon”strategy by deploying green computing infrastructureand building intelligent energy and carbon managementsystems, achieving reductions in greenhouse gas (GHG)emissions.
Environmental responsibility: technolo-gy-driven green development
We have strengthened our corporate governance frame-work by establishing effective mechanisms for checksand balances of power and decision-making execution.We have improved internal control and risk managementsystems, reinforced anti-fraud measures, and ensuredhigh-quality development through high-standard gover-nance.Looking forward, we will steadfastly advance toward thegoals of carbon peaking by 2030 and carbon neutralityby 2060, deepen the application of AI technologies inboth security protection and green transition, and worktogether with industry partners to build a secure andsustainable digital ecosystem.
Corporate governance: compliance-driv-en sustainable development
Social responsibility: safeguarding thedigital ecosystem with security
Founder of 360 Group: Zhou Hongyi
We have long been committed to national-level cyberse-curity defense. With over two decades of practical expe-rience in cyber offense and defense, as well as indus-try-leading threat perception capabilities, we havecontinuously contributed to China’s digital securitydefenses. By the end of the reporting period, we hadidenti?ed a total of 60 APT organizations, accounting for98% of all APT groups discovered domestically. Theseincluded state-sponsored hacking organizations such asthe US Central Intelligence Agency (CIA) and NationalSecurity Agency (NSA), revealing their decade-longin?ltration and cyberattacks targeting China’s criticalinfrastructure, research institutions, and governmentagencies.
0304
We established a ransomware protection system cover-ing the full lifecycle of “pre-attack, during attack, andpost-attack.” In 2025, we intercepted 1.16 billionbrute-force cyberattacks, protecting over 2 million devic-es; and identi?ed 5,565 ransomware incident leadsacross 48 countries and regions worldwide. We alsodeveloped an integrated intelligence system covering“vulnerabilities–patches–components.” In 2025, weresponded to over 2.8 million vulnerability queries andissued nearly 12,000 targeted alerts, improving remedia-tion ef?ciency by 40% and effectively safeguarding morethan 35 million terminals and business systems.
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
We focus on three main business segments: Internet services, digital security, and smart hardware. By leveraging techno-logical innovation and practical applications, we have comprehensively covered primary departments and business frontswith large model services through 360 Zhinao. We have implemented applications in various scenarios such as browsers,search, Nano AI, of?ce tools, document libraries, smart hardware, and digital security, contributing to overall businessgrowth. During the reporting period, we recorded operating revenue of 8.693 billion yuan, representing a year-on-yearincrease of 9.37%. Net pro?t attributable to shareholders of the listed company reached 263 million yuan, re?ecting ayear-on-year increase of 1.357 billion yuan. We also maintained a high level of R&D investment, with R&D expenses totaling
3.225 billion yuan, accounting for 37.11% of operating revenue.
Guided by our mission to “make the AI world safer and better,” we have deeply integrated ESG principles into our strategyand operations, driving sustainable development through technological innovation. As a leading AI-driven digital securitycompany, we have consistently placed user value at the core and compliance as the foundation, while actively ful?lling oursocial responsibilities in safeguarding digital security.
Contents
Report ScopeData SourcesPublication and AccessMessage from the Chairman
Report PrefaceAbout The ReportReporting GuidelinesReporting Period
Company Pro?leOur Corporate CultureOur BusinessOur Honors For The Year
ABOUT 360 SECURITY
Due Diligence andStakeholder EngagementDouble MaterialityAssessmentMateriality Assessment Results
MATERIALITY ASSESSMENT
SustainabilityGovernance FrameworkSustainability ManagementMechanismsESG Capability Improvement
ESG GOVERNANCEFRAMEWORK
Climate Change ResponseEnvironmental Compliance ManagementPollutant and Waste ManagementEnergy ConsumptionWater Resource ConsumptionCircular EconomyEcosystem and Biodiversity Conservation
ENVIRONMENTALCOMMITMENT
EmployeesSafety and Quality OfProducts and ServicesData Security and CustomerPrivacy ProtectionInnovation-drivenDevelopmentEthics In Science and TechnologyWin-win CooperationRural RevitalizationSocial Contribution
99101
SOCIAL COMMITMENT
Corporate Governance SystemRemuneration ManagementParty Building LeadershipAnti-bribery andAnti-corruptionFight Against UnfairCompetition
GOVERNANCECOMMITMENT
Key Performance TableReport Index
ABOUT 360 SECURITY
COMPANY PROFILEOUR CORPORATE CULTUREOUR BUSINESSOUR HONORS FOR THE YEAR
0910
360 Security Technology Inc. (hereinafter referred to as “360” or“the Group”) is a leader in digital security. Guided by our mission of“supporting small and micro businesses wherever they are,” wehave established a dual development focus on AI and security. Wefocus on three main business segments: Internet services, digitalsecurity, and smart hardware. By leveraging technological innova-tion and practical applications, we have comprehensively coveredprimary departments and business fronts with large model servicesthrough 360 Zhinao. We have implemented applications in variousscenarios such as browsers, search, Nano AI, of?ce tools, documentlibraries, smart hardware, and digital security, contributing tooverall business growth.
Company Pro?le
We closely follow national strategic development needs and continuously practice the dual-track strategy of “AI + Security.”Upholding the mission of “making the AI world safer and better,” we have deeply advanced the “ALL IN AGENT” planning.Driven by technological innovation and leveraging our long-standing technological advantages, extensive user base, andecological synergies, we ensure stable operations across our major business lines, continuously promoting the digital andintelligent transformation and upgrading of various operations. These efforts aim to enhance core competitiveness andactively contribute to the development of the smart economy and new quality productive forces. During the reporting period,our main business focused on three core segments: Internet services, digital security, and smart hardware.
Our Business
Commercialization business
Internet Services Business
Our internet business leverages the 360 suite of PC and mobile products as high-ef?ciency traf?c entry points. Driven by ourproprietary AI large model, we have developed three core business pillars: a commercialization segment centered on internetadvertising and services; an internet product segment supported by scenario-based products and AI applications; and agame value-added segment characterized by the operation of PC, web-based, and mobile games. The business effectivelyconnects business (B-end) clients with consumer (C-end) users. Through diversi?ed models, including intelligent marketingupgrades, membership subscription services, and integrated game operations, we continuously deepen traf?c value moneti-zation and full-chain commercial value enhancement, forming a well-structured and synergistic internet business ecosystem.
Our commercialization business mainly relies on the full range of 360 PC and mobile products, such as 360Browser, 360 Search, 360 Safeguard, 360 Software Manager, and Nano AI as traf?c entry points, monetizingtraf?c through internet advertising and related services. Meanwhile, we leverage our self-developed 360 Zhinaolarge model and 360CV large model to comprehensively promote the intelligent upgrade of the smart businesssystem. We focus on aspects such as advertising creative generation, user insights, intent recognition, contentadaptation, and conversion funnel optimization, reconstructing the full advertising value chain on the PC sideand establishing a new AI-driven paradigm for end-to-end intelligent marketing.
Nano Al Interface
360 Wenku Interface
360 Al Of?ce Interface
Our Corporate Culture
Provide innovativesolutions for a safer world
Vision
Corporate missionTo make the AI world
safer and better
Core values
User-?rst mindset,mission-driven approach,innovation, open collabo-ration, and integrity
360 AI Marketing Illustration
Large ModelCapabilities
IntelligentAdvertisingPlatform
Creative headline
& copywritingGenerativeCapability
360 Lingshu 360 Chuangyi
360 ZhitouUserOperations& BusinessOperations
AI-powered advertisingdata analyticsAgentsMultimodal presentation& agent services
AI-Powered Ad Creatives
AI-poweredintelligent ad delivery
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
ReasoningCapabilityGenerativeintent
LearningCapability
User behavior &preference understanding
MultimodalProcessing Capability
Creative image &video generation
1112
Digital Security Business
360 Security Cloud Services
We have long been committed to national-level cybersecurity defense. With over two decades of practical experi-ence in cyber offense and defense, as well as industry-leading threat perception capabilities, we have continuouslycontributed to China’s digital security defenses. With 20 years of offensive and defensive practical experience, wepossess domestically leading security threat intelligence data, 1.5 billion terminal user alert data, and a samplelibrary exceeding 3EB. Built upon national strategic requirements to “see” advanced threats, we have explored thedevelopment of a China-speci?c digital security solution centered “threat visibility.” Currently, we widely servegovernment agencies, large enterprises, critical infrastructure operators, and SMEs, providing them with compre-hensive cybersecurity services. Our main security services and products include overseas APT capture, 360 SecurityCloud, 360 Security Large Model, 360 Large Model Safeguard, and 360 Security Agent Swarm.
Game value-added services
Our game value-added business primarily covers PC game operations, exclusive agency distribution ofweb-based and mobile games, as well as joint operation platforms. In the PC game segment, we focus onoperating the China-region business of World of Tanks and World of Warships, both developed by Wargaming,leveraging our strong product reputation and re?ned operational capabilities to build a large and loyal userbase. We currently operate nearly 1,000 game products, providing users with a one-stop comprehensiveservice platform that integrates game downloads, content information, and interactive reviews, therebycontinuously enhancing user experience.
World of Tanks Graphic
Data as a Service (DaaS)Intelligence as a Service
Probes as a ServiceKnowledge as a ServicePlatform as a Service (PaaS)LightweightService Probes
Government......
Cloud-NativePlatform
Cloud-Native
Data
Cloud-Native
Experts
Cloud-NativeProbes
360 Security CloudTools as aService (TaaS)Experts as aService (EaaS)
Capabilities as a Service
Services
Regulators Finance Insurance Energy Transportation Education Healthcare Medical Manufacturing
Internet product business
We provide internet product services based on the core functionalities of our existing products, deeply align-ing with users' diverse needs in high-frequency scenarios such as of?ce collaboration, daily usage, and digitallife. By actively integrating AI-driven innovations, we have launched a range of value-added services tailoredto these scenarios, generating membership-based subscription revenue. Currently, we have developed a richand diverse product ecosystem matrix, which mainly includes 360 Wenku, 360 AI Of?ce, Nano AI, Nano ComicDrama Pipeline, and 360 Security Lobster, among other distinctive products and services. This ecosystemcovers various ?elds such as knowledge acquisition, intelligent of?ce, content creation, and intelligent assis-tants, continuously enhancing user experience and product stickiness.
360 Wenku Interface360 AI Of?ce Interface
Nano AI Interface
360 Nano Comic Drama
Pipeline Interface
360 Security Lobster
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
Two Major Modules on 360 Large Model Safeguard:
Content Security Assessment and Content Security Barriers
360 Security Large Model Platform
1314
360 Security Operation Agent
Guided by our brand philosophy of “Smart Security,” we leverage our strong technological foundation to build a smarthardware portfolio centered on smart cameras, video doorbells, and dash cams, covering diverse application scenari-os such as home security, smart monitoring, and in-vehicle safety. Currently, we are committed to transforming fromhardware sales to a business model that combines hardware with cloud services, using hardware sales as thefoundation for user growth and cloud services and other value-added services as new drivers for business growth.Additionally, we continue to deepen our technological R&D, comprehensively enhancing the AI intelligence level of ourproduct line and improving the core competitiveness of our products.
Smart Hardware Business
360 Dash Cam G980
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
360 Security
Products360 SecurityProducts
Third-PartySecurity Products
User Self-Built
Systems
360 Security Large Model Platform
CoE Security Large Model
Endpoint SecurityOperations Expert
Local Brain SecurityOperations Expert
Advanced Threat
Hunting Expert
Malicious EmailDetection Expert
Security ResponseExpertSecurityKnowledge BaseAttack & defense TTPsKill chain experience library
Private knowledge base...
SecurityToolkitSample detection toolsTraf?c reconstruction tools
Intelligence query tools
...Digital Expert
Expertcreation
Rolecon?guration
Openingscript
Skillcon?guration
Knowledgebase selection
Recommendedquestions
Debugging& releaseSkillOrchestration
LLMConversation
Function-call
Knowledgebase search
Pluginapplication
Judgement
engine
Contentextraction
Orchestrationtesting
ExternalPlugins
Environmentcon?guration
Categorymanagement
Interfacede?nition
Interfaceauthentication
JDictionarymanagement
Exceptionhandling
Linkagetesting
Language
HubPlanning Hub
Language translationCode generation
Ethics Hub
Sentiment analysis
Memory Hub
Information
memoryEthics & complianceSolution planningGoal decomposition
Goal decomposition
Analysis &detection module
True/Falsejudgement module
Logical reasoning
module...Text summarizationIntent recognition
CloudEmpowe-rment
LocalDeployment /Model SaaS
DigitalSecurityExperts
EmpoweringSecurityOperations
Business Capabilities
BusinessEngines
BasictData
Visualization & DisplaySecurity Situation DashboardWorkbenchCockpitContent Security EvaluationContent Security Guardrails
Evaluation task
managementEvaluation
reportModel evaluation
& comparison
Safe proxyresponse model
Sensitive wordmatching engine
Evaluationdatasets
=
Rule & policylibrary
Interventionresponse library
Sensitiveword library
Model integration
con?guration
Model assetinformationInterventionresponse engine
Task schedulingengine
Computational cost
protection engine
Sensitive dataidenti?cation engineEvaluation &adjudication model
Text moderation
model
Image moderation
model
Audio moderation
model
Video moderation
model
Corpus security
assessment
Guardrail alert(multi-modal detection)Computationalcost protection
Intervention library
management
Risk tagmanagementIntelligentprotection policies
Sensitive wordmanagement
Guardrailvalidation lab
Sensitive data
protection
Guardrail
logsRisk datamanagement
DatasetmanagementEvaluation vs. guardraileffectiveness comparison
Security Operations Agent Matrix
Threat AlertOperations
Agent
Phishing EmailAnalysis Agent
IncidentInvestigation &Response Agent
Policy & Rule
Manage-ment Agent
Security Risk
InsightAgent
Vulnerability
Manage-ment Agent
AuxiliaryOperations
Agent
ThreatIntelligenceResearch Agent
Security Report
Generation
Agent
Agent Framework
Local Security Brain
MCP Service
Data Support
Knowledge Correction
Model Capabilities
Alert correlation
& analysisSituationalAwareness
AnalysisCenter
AssetCenter
Response
Center
AssessmentCenter
Task OrchestrationEngine
Supervision &Evaluation EngineTask Generation
EngineDeepseek LargeLanguage Model
360 CCoE Security
Large ModelQwen LargeLanguage Model
Other LargeLanguage ModelsCommand Scheduling
EngineBig Data Security Infrastructure
Incidentinvestigation
Logretrieval
Graphpro?ling
Securityreporting
Alert dataLog dataAsset dataVulnerabilitydataAccountdataWork orderdata
Common security
knowledge
IntelligencedataTTPs (Tactics,Techniques& Procedures)
Securityspeci?cations
Expertexperience
Private domain
knowledge
............
KnowledgeBaseSecurityData
Security Large Models
1516
Our Honors for the Year
Nano AI was recognized as a“2025 Typical Case for Techno-logical and Industrial Innova-tion among Private Enterprises”by the All-China Federation ofIndustry and Commerce
Our project Key Technologiesand Applications of Large-ScaleIntelligent CybersecuritySituational Awareness Monitor-ing Systems won the First Prizeof the Hainan Provincial Scienceand Technology Progress Award
We were recognized as aleading enterprise in Beijing’s“industry–education–evalua-tion” integrated skill ecosystemfor digital and intelligent
security
We were selected among the“Top 20 Cybersecurity Compa-nies in China 2025”
360 AI Enterprise Browser wasincluded in the 2025 Casebookon Digital and Intelligent Transfor-mation of Enterprise Groupsreleased at the Internet Society
of China
Our 360 Security Services Team
was awarded the title of“Outstanding Team in Annual
Cyber Attack and Defense
Exercises”
We won the Leading Technolo-gy Innovation Award at thenational ?nals of the AI PioneerCup for our Large ModelSafeguard solution
We were recognized with multiple industry
honors, including “Technical Support Unitof CNVD,” “Special Contribution Award forCNVD Collaboration 2024,” “OutstandingContribution in Vulnerability Reporting2024,” “Outstanding Contribution inVulnerability Emergency Response 2024,”“ANVA Outstanding Organization(Enterprise),” “ANVA Member Unit,” and“CCTGA Outstanding Member Unit”
We were honored with the titleof “Model Collective of Beijing”
The Party Committee of 360Group was recognized as an“Advanced Primary-Level Party
Organization”
We were recognized as an“Outstanding Support Unit” by
CNTISP
We were recognized as a“Three-Star Technical Support Unit”(highest rating) by the CAPPVD
We were awarded the titles of“Outstanding Technical SupportUnit” and “Technical Support Unit”by the Industrial Internet ofVehicles Product Security Vulnera-bility Database under the MIITCAPPVD, and received the “OriginalVulnerability Certi?cate”
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
DUE DILIGENCE AND STAKEHOLDER ENGAGEMENTDOUBLE MATERIALITY ASSESSMENTMATERIALITY ASSESSMENT RESULTS
Materiality Assessment
1920
Compliance with laws and regulations
Compliance operationsFair competitionClimate change responsePollution prevention and controlResource ManagementEnergy ConsumptionSupply chain securityProduct and service securityEmployee rights and interestsFinancial stabilityInformation transparencyRisk managementInnovation-driven development
Policies and guidelinesOversight and inspection
Visits
Information disclosure
Shareholder MeetingCorporate announcementsInvestor communicationHigh-quality products and services
User experienceInformation security and privacy protection
User feedback channelsSocial media engagementUser satisfaction surveysRecruitmentProtection of employee rights and interests
Training and developmentWork-life balance
Employee training and communication
Employee care programsEmployee feedback channelsEmployee satisfaction surveysFair cooperationMutual bene?tsSustainable supply chain
Supplier empowerment
Supplier management
Supplier meetingsIndustry eventsTechnical cooperationEnvironmental protectionPublic welfare projectsCorporate social responsibility
Strategic cooperationMedia engagement
Community engagement
StakeholderCommunication channelsStakeholder concerns
Shareholdersand investors
Government andregulatory agencies
Customers and users
Employees
Suppliers and partners
Community and media
Double Materiality AssessmentDue Diligence and Stakeholder Engagement
To ensure the comprehensiveness and accuracy of ESG issue identi?cation, we systematically identi?ed six core stakeholdergroups based on our industry characteristics, operational realities, and business models. Through due diligence approaches,including regular and ad hoc interviews, surveys, and thematic communications, we have established normalized communi-cation mechanisms to fully understand stakeholder concerns and feedback, enabling us to create sustainable value in amore targeted manner.
In preparing this report, we conducted ESG issue identi?cation in accordance withthe SSE Guidelines, while also referencing international sustainability disclosurestandards such as the GRI Standards and the ISSB requirements. We establisheda structured process for issue identi?cation and materiality assessment, analyz-ing ESG issues from both ?nancial materiality and impact materiality perspectivesto identify material issues to the Company and assess their actual and potentialrisks and impacts on our operations.We adopted the “double materiality” assessment framework when preparing thisreport. This framework comprehensively evaluates each issue from two perspec-tives: ?nancial materiality (i.e., the impact of the topic on the Company's ?nancialperformance) and impact materiality (i.e., the internal and external impacts of theCompany's activities on the environment and society). During the assessmentprocess, we employed various methods such as online surveys, managementworkshops, and expert reviews, to collect and analyze stakeholder input. Thisserved as a robust basis for determining the double materiality of ESG issues.
Materiality Assessment ResultsBased on the results of the materiality assessment and in line with the principle of materiality, we identi?ed key ESG issuesfor 2025. These topics were mapped into a materiality matrix according to their impact materiality and ?nancial materiality.
Double materiality matrix for 360 Security
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
Impact materiality
Financial materiality
Climate change response
Data security and customerprivacy protection
Safety and quality ofproduct and service
Innovation-driven developmentCorporate governance system
Remunerationmanagement
Anti-bribery andanti-corruptionESG Governance Framework
Mutually bene?cialpartnerships
Employees
Ethics in scienceand technology
EnergyconsumptionCircular economy
Party buildingEcosystem and biodiversity conservation
Social contributionRural revitalizationEnvironmentalcompliance management
Water resourceconsumptionPollutant and waste management
Due diligence andstakeholder engagement
Anti-unfair competition
Issues with both?nancial and impactsigni?canceIssues with ?nancialsigni?cance but noimpact signi?cance
Issues with neither?nancial nor impactsigni?cance
Issues with impactsigni?cance but no?nancial signi?cance
可持续发展治理架构可持续发展管理机制ESG能力提升
ESG GovernanceFramework
SUSTAINABILITY GOVERNANCE FRAMEWORKSUSTAINABILITY MANAGEMENT MECHANISMSESG CAPABILITY IMPROVEMENT
2324
Sustainability Governance Framework
At 360 Security, we attach great importance to the development of our ESG manage-ment system. To effectively align ESG strategy with our business operations, and instrict compliance with relevant requirements such as the Guidelines, we have estab-lished a top-down ESG governance framework with clearly de?ned roles and responsi-bilities. This framework positions the Board of Directors as the highest decision-makingbody, senior management as the coordinating management body, and variousfunctional departments as speci?c execution units, forming a closed-loop operationmechanism of “decision-making—management—execution” to ensure that ESG princi-ples are fully integrated into our corporate strategy and daily operations.
We have established an internal control system related to ESG. On the environmentalfront, we have formulated control details regarding energy management, wastedisposal, and other aspects, clarifying the speci?c responsibilities and operationalprocesses of each department in energy conservation, emissions reduction, andenvironmental compliance. On the social front, we have clari?ed the control require-ments in areas such as employee rights and interests, supply chain management,and product quality and safety, ensuring effective operations and ful?llment of socialresponsibilities. On the governance front, we have issued management systemsregarding information disclosure, internal auditing, and compliance management toensure ef?cient and standardized internal governance.
ESG Capability Improvement
We continuously deepen our understanding and implementation of sustainability principles. Byactively participating in high-level ESG forums and training programs, we have enhanced theprofessional competencies and overall capabilities of our personnel, thereby strengthening ourgovernance standards.
Sustainability Management Mechanisms
To ensure the standardization and ongoing improvement of our ESG performance, wehave established sustainability management mechanisms and integrated them intoour daily operations and decision-making processes. These mechanisms haveenabled us to effectively mitigate ESG risks.
Internal rules
Mechanism
Governance level
Speci?c actions
Senior management convenes meetings based on proposals submitted by the ESGTask Force to review ESG matters, with outcomes subsequently reported to the Boardof Directors.Information reportingmechanism
The company incorporates senior management's performance in ful?lling ESG-relat-ed responsibilities into the management's overall performance evaluation system.
Performance evaluation
mechanism
Organizational bodyScope of responsibilities
1. Reviewing and approving the Company's ESG strategy and
goals, to ensure their alignment with the Company's long-termobjectives;
2. Reviewing and approving the Company's ESG report and the
disclosure of material ESG issues; and
3. Reviewing and approving material ESG issues and associat-
ed major risk response plans, etc.
1. Directing and overseeing the implementation of the Compa-
ny's ESG policy and strategy;
2. Reviewing the Company's ESG report and the disclosure of
material ESG issues;and
3. Evaluating material ESG issues and associated major risk
response plans, etc.
1. Standardizing and normalizing ESG practices and ensuring
compliance with approval procedures;
2. Preparing ESG-related reports, implementing management
directives, collecting and organizing data from variousplatforms, departments and subsidiaries, and disclosing ESGinformation to the public; and
3. Following emerging ESG trends, interpreting relevant legal
and regulatory frameworks, aligning ESG practices with theCompany's ESG strategy, managing ESG risks and issues, andproviding feedback and recommendations, etc.
Manage-
ment
SeniorManage-
ment
Decision-making
Board ofDirectors
Implem-entation
ESG Task
Force
Honors and Awards in Sustainability
Wind ESG RatingSino-Securities Index ESG Rating
Upgraded from A to AAUpgraded from BB to BBB
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
可持续发展治理架构可持续发展管理机制ESG能力提升
Environmental Commitment
CLIMATE CHANGE RESPONSEENVIRONMENTAL COMPLIANCE MANAGEMENTPOLLUTANT AND WASTE MANAGEMENTENERGY CONSUMPTIONWATER RESOURCE CONSUMPTIONCIRCULAR ECONOMYECOSYSTEM AND BIODIVERSITY CONSERVATION
2728
Climate Change Response
In response to China’s “Dual Carbon” goals (carbon peaking by 2030 and carbonneutrality by 2060), we have established a climate change management systemled by the Board of Directors to advance our green and low-carbon develop-ment, while enhancing corporate social responsibility and environmental aware-ness. The ESG Task Force is responsible for implementation, progressivelyintegrating climate-related considerations into our corporate management.We recognize the profound impact of climate change on our business operationsand value chain. Accordingly, we have incorporated climate-related issues intoour overall sustainability framework and established a climate governancestructure with clearly de?ned responsibilities and division of labor. This structureforms a coordinated three-tier system of “decision-making – management –execution”: the Board of Directors serves as the leadership and decision-makingbody for climate-related matters; senior management provides research,guidance, and oversight; and the ESG Task Force, composed of ESG coordinatorsfrom headquarters and various business units, is responsible for execution.
Responsible for analyzing climate change-related strategies and policies,providing leadership on climate initiatives, and ensuring alignment with theCompany’s long-term development objectives.Responsible for perform climate governance and oversight of climate-re-lated matters authorized by the Board; providing overall planning anddeployment of climate initiatives; reviewing climate-related targets andstrategies; and approving assessments of climate-related risks, opportuni-ties, and corresponding response measures.Implement climate-related work plans and periodically report work resultsto management.
Climate-related Governance
At 360 Security, we conducted climate scenario analysis with referenceto the climate scenario models set out in the Sixth Assessment Report(AR6) of the UN Intergovernmental Panel on Climate Change (IPCC).Taking into account external environmental changes affecting ouroperations, including ecological, economic, and social factors, weselected two pathways, SSP5-8.5 and SSP1-2.6, to assess potentialclimate-related risks and opportunities and to formulate correspondingresponse strategies. This ensures that our operational strategy alignwith the global climate transition.
Climate Strategy
Climate Scenario Analysis
Decision-making
Management
Implementation
Board ofDirectors
SeniorManagement
ESG Task
Force
Climate Governance Framework
This scenario is usually described as a futurescenario with high emissions, signi?cant develop-ment inequality and strong dependence on fossilfuels. In this scenario, physical risks are relativelyhigh and transition risks are relatively low. Coun-tries have not introduced policies to deal withclimate change. Energy demand and GHGemissions continue to grow, leading to continuedwarming of the global surface and an increase inthe frequency of extreme climate events andother phenomena.
IPCC’s SharedSocioeconomicPathwaysSSP5-8.5
More than 4°C(relative topre-industrialtimes)High-emissionsscenario
This scenario combines a sustainable socioeco-nomic background with a low radiative forcingclimate target. It is often described as a futurepath characterized by the synergy betweengreen transition and climate action. In this scenar-io, transition risks are relatively high and physicalrisks are relatively low. This scenario aims toachieve the long-term goals of the Paris Agree-ment (keeping global temperature rise below 2°Cand working towards limiting it to 1.5°C).
IPCC’s SharedSocioeconomic
Pathways
SSP1-2.6
Below 2°C(relative topre-industrial
times)Low-emissions
scenario
ScenarioReference
Projectedtemperature increase
Scenario description
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
2930
Climate Risks and Opportunities
Physicalrisks
Type
Climate
risks
DescriptionFinancial impact
Magn-itude
ImpactHorizon
Mitigationmeasures
Type
Climaterisks
DescriptionFinancial impact
Magn-itude
ImpactHorizon
Mitigationmeasures
Type
Climateopportunities
DescriptionFinancial impact
Magn-itude
ImpactHorizon
Mitigationmeasures
Acuterisks
Chronic
risks
Transitionrisks
Market
risks
Incorporate energyef?ciency and carbonreduction into productdesign and production;explore the use ofrenewable and recyclablematerials.Growing environmentalawareness is drivingconsumer preferencetoward low-carbon andenergy-ef?cient products
Failure to reduce productcarbon footprint may weakencompetitiveness, lead tocustomer attrition towardsmore energy-savingalternatives, and affect ourrevenue stability, marketshare, and long-term growthpotential.
Medium
Mid-term
Transitionrisks
Note: The time horizons for assessing risks and opportunities are de?ned as short-term (0–1 year), medium-term (1–5 years), and long-term (over 5 years).
Provide digital andlow-carbon transitionsolutions for our clients.
Supported by policiesand regulationspromoting AI develop-ment, the industry isexperiencing unprece-dented growthopportunities. Leveragingour technologicalexpertise, we canaccelerate the transitionfrom digitalization tointelligent transforma-tion.
By leveraging our AI capabili-ties, we can seize the windowof opportunity for upgradingfrom industrial digitalization tointelligent transformation,expand low-carbon digitaltransformation servicescenarios, and open up newavenues for value growth. Byenabling the green transitionof the real economy, we canstrengthen business synergies,enhance the market reach andpro?tability of our corebusinesses, and inject strongmomentum into sustainabledevelopment.
Technology
opport-unities
Medium
Mid- to
long-termTransitionopportu-nities
Policyrisks
Promote the green transitionof data centers andenergy-intensive operations(e.g., the adoption of liquidcooling technologies andprocurement of renewableelectricity).
With the advancement ofcarbon neutrality goals,certain provinces and cities inChina have begun to includeentities such as internet datacenters in carbon emissiontrading pilot programs. Forexample, enterprises inBeijing with annual carbonemissions exceeding 5,000tons are required toparticipate.
Once included in the carbonemission trading pilot, enterprisesmay face carbon quotaconstraints. Excess emissionswould require purchasingadditional allowances or investingin emission reduction projects,increasing compliance costs,raising operational thresholds,squeezing pro?tability, andexerting sustained pressure oncash ?ow.
Low
Mid- tolong-term
Establish regular stakeholdercommunication mechanismsand enhance the quality andtransparency of ESGdisclosures.
We are subject to extensivescrutiny from regulatoryagencies, investors, ESGrating agencies, and thepublic. If we fail to respondactively and effectively, itmay affect our ?nancingopportunities and sustainabil-ity performance.
If we fail to effectively respond tothe expectations of regulators,investors, and the public, we willface reputational risks that couldundermine market trust,potentially weakening our?nancing bargaining power andnarrowing our funding channels.Our brand in?uence and marketcompetitiveness may also becompromised, which couldweaken customer loyalty and thefoundation for revenue growth,thereby constraining our strategictransformation and sustainabilitypace, posing potential limitationson long-term value release.
Medium
Mid- tolong-term
The arti?cial intelligenceand digital securityindustries we operate inare technology-intensivesectors, and under thedual carbon context, wemay face pressure totransition towardlow-power technologies.
In the context of the “DualCarbon” strategy, failure tokeep pace with the transitionto low-power technologiesmay weaken the competitive-ness of existing technologyroadmaps, diminish the valueof prior R&D investments, andsqueeze market share.Meanwhile, catching up withtechnological iterations wouldrequire additional resources,driving up long-term operatingcosts, increasing the burdenon corporate resources,undermining the stability ofthe pro?t model, andconstraining future develop-ment space.
Technology
risks
Medium
Mid- tolong-term
Increase R&D investmentin low-carbon technologiesand accelerate technologyupgrades.Strengthen collaborationwith universities andresearch institutions toaccelerate innovation andapplication.
Extreme weather events suchas heavy rainfall andheatwaves caused by climatechange may disrupt datacenters and daily operations,affecting business continuityand operational security.
Disruptions to data centers maylead to operational downtime,delayed core service responses,and reduced customer experienceand market competitiveness,thereby putting pressure onrevenue. Increased emergencyrepair, operation and maintenance(O&M) costs may drive up O&Mcosts, consume resources thatwould otherwise go to normaloperations, and put pressure onoverall pro?tability.
Medium
Short-term
Strengthen early warningand contingency planningbased on meteorologicalforecasts to mitigateimpacts on data centersafety.Establish and continuouslyimprove environmental riskemergency response plans;conduct regular riskidenti?cation, reviews, andemergency drills.
In 2025, the averagetemperature in China was
10.9°C, tying with 2024 as the
highest since completerecords began in 1951. Therise in temperature will leadto water shortages, imposinghigher demands on coolingand water conservation fordata centers.
Rising temperatures lead to waterscarcity, which intensi?es thepressure on data center coolingenergy and water consumption,drives up the intensity of energyand water consumption, adds tooperational burdens and costpressures, and squeezes corporatepro?t margins. Increasedinvestment in equipment upgradesand operation and maintenancerequired to ensure stable systemoperation will further raise thethreshold for long-term resourcecommitment.
Low
Mid- to
long-term
Establish emergencyresponse mechanisms forcooling systems andoptimize data centercooling ef?ciency.Regularly inspectmunicipal water supplysystems to ensureadequate backup waterresources.
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
3132
We place strong emphasis on the systematic management of climate-related impacts, risks, and opportunities. Following aclosed-loop approach of “identi?cation – assessment – response – monitoring – reporting,” we have established a structuredand science-based management process to ensure that our strategy and operations effectively address climate-relatedchallenges and opportunities.
Climate Impacts, Risks, and Opportunities
At 360 Security, we actively respond to the strategy of “carbon peaking by 2030 and carbon neutrality by 2060”. In line withour corporate development strategy, we have established our “3060” carbon goals, committing to achieve carbon peakingby 2030 and carbon neutrality by 2060.
Note: 1. Direct emissions (Scope 1) include GHG emissions from gasoline, diesel, and natural gas Indirect emissions (Scope 2) include GHG emissionsfrom purchased electricity.
2.The electricity emission factor for purchased electricity is derived from the Announcement on the 2023 Electricity Carbon Emission Factor, published
by the Ministry of Ecology and Environment in December 2025.
Climate Performance Indicators and Targets
At 360 Security, we recognize that the energy intensity of computing infrastructure has amaterial impact on climate change. To support the achievement of our carbon peakingand carbon neutrality goals, we have embedded green and low-carbon principlesthroughout the entire lifecycle of data center planning and operations. Actively alignedwith China’s “East Data, West Computing” strategy, we systematically advance GHGemission reductions across two key dimensions: energy mix optimization and computingef?ciency improvement. In addition, we continue to strengthen internal energy manage-ment and promote green of?ce practices to reduce energy consumption and emissions.
We signed a strategic cooperation agreement with China Mobile (Guizhou) to jointly create a green intelligentcomputing power hub for the “East Data, West Computing” initiative. Leveraging Guizhou’s abundant cleanenergy resources (such as hydropower), the project provides low-carbon computing power for high-demandscenarios including AI large model training and urban security platforms. By directing computing demand towardwestern regions rich in clean energy, we reduce reliance on fossil fuels from the source and signi?cantly lower thecarbon intensity per unit of computing power.At the same time, we have integrated our proprietary intelligent computing scheduling platform with the greencomputing hub to build an ef?cient infrastructure integrating computing power, algorithms, and data. Throughelastic scheduling and resource pooling technologies, we maximize resource utilization, avoid idle computingwaste, and promote centralized and low-carbon computing supply.
GHG Reduction Measures
Deployment of green computing power
Conduct climate scenario analysis under SSP5-8.5 andSSP1-2.6 pathways to identify climate-related impacts,risks, and opportunities under different scenarios, andassess gaps between climate targets and currentperformance
Senior management reviews key risk indicatorsand reports signi?cant climate-related risks tothe Board of Directors on an annual basis
Disclose informationon the identi?cationand management ofclimate-related risksand opportunities
Incorporate identi?edclimate-related risks intothe risk managementframework and prioritizethem based on severity
Relevant departmentsdevelop targeted riskmanagement andresponse measures,formulate mitigationplans, and submit themto senior managementfor review
Management
Process forClimate Impacts,Risks, andOpportunities
Riskidenti?-cation list Riskassessment
andprioritization
Responsedevelopment
Climate-relateddisclosureMonitoring
andoversight
Annual GHG Emissions
Direct GHG emissions (Scope 1)Indirect GHG emissions (Scope 2)
Total GHG emissionsGHG emission intensity
255.80 tCO2e
11,686.93 tCO2e11,942.73 tCO2e
1.37 tCO2e per million yuan in revenue
Indicator2025
In 2025, we of?cially launched the Digital Twin-based Energy and Carbon Management Platform, establishing asmart energy and carbon management system covering 230,000 square meters across our Beijing of?ce buildingand the Tianjin Innovation Park. The platform integrates digital twin technology, IoT, and AI algorithms to create anintelligent system covering the entire energy and carbon management lifecycle. It enables real-time monitoringand autonomous regulation of cooling stations, heating systems, and power distribution systems, transformingbuildings from “passive spaces” into “active systems.” Through a closed-loop management mechanism of “targetsetting – strategy optimization – real-time monitoring – iterative improvement,” the platform effectively reducesmanual intervention and resource investment. The project was selected as a “2025 Benchmark Case for AI-En-abled Smart Building Innovation,” providing a replicable model for low-carbon intelligent of?ce operations in theinternet sector.
AI-enabled building energy and carbon management
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
3334
Behavioral energy saving: Strictly enforce the principle of “turn off
lights and equipment when not in use.” Lighting, air conditioning (AC),and electronic devices are switched off promptly after meetings toprevent unnecessary energy consumption.
Precision AC control: Develop seasonal air conditioning operation
plans, establish temperature control early warning mechanisms, andutilize real-time monitoring data to optimize system performance in theof?ce building. During transitional seasons (e.g., March–May), naturalventilation is prioritized to reduce VRV system usage.Elevator optimization: Implement staggered stop strategies and
encourage stair use for ?oors below level 7 during peak hours to reduceelectricity consumption.Promotion of green commuting: Encourage employees to embracelow-carbon commuting, prioritize the use of new energy vehicles forbusiness trips, and support the construction of charging station parkingspaces to replace traditional fuel with clean energy, promoting carbonreduction in business travel.
Energy conservation
Install water-saving aerator faucets across of?ce and public areas toreduce water consumption per use.Display water-saving signage in key areas such as restrooms andpantries to promote conservation awareness and behavioral changeamong employees.
Water conservation
Promote digital of?ce systems, includingelectronic approvals, online collaboration, andcloud storage, to reduce paper consumptionfrom the source.Establish “green recycling stations” to collectand reuse single-sided printed paper forinternal drafts, enabling resource recycling.Implement the Management Measures forLow-Value Consumables to standardize equip-ment maintenance and usage, strengtheninspections, and extend equipment lifespan,tapping into the potential for cost reductionfrom existing stock.Encourage employees to use reusable cups toreduce reliance on disposable products.
Material conservation
Adopt energy-ef?cient equipment and optimize cooling systems through natural cooling utilization and dynamiccontrol strategies to reduce energy consumption and carbon intensity.Deploy dynamic scaling technologies for operational servers, enabling demand-based allocation of computingresources, meaning scaling up during peak demand and down during off-peak periods, to avoid idle capacityand energy waste from the source.Retro?t our self-built old data centers with high power usage effectiveness (PUE), gradually phasing out inef?-cient facilities and prioritizing the use of professional data centers with lower PUE to reduce energy consumptionper unit of computing power through infrastructure iteration and centralized deployment.
Low-carbon transition of the data center
Regulate temperature and humidity, absorb carbon dioxide, and release oxygen by introducing greenery inindoor of?ce spaces and outdoor public areas. This reduces reliance on mechanical ventilation and air puri?ca-tion systems, indirectly lowering overall energy consumption.
Green landscaping for environmental regulation
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
Environmental Compliance ManagementAt 360 Security, we consistently adhere to a green and low-carbon development philosophy andstrictly comply with applicable laws and regulations, including the Environmental Protection Law ofthe People’s Republic of China. We have established clear emergency response procedures andaccountability mechanisms at all levels, forming a comprehensive and well-de?ned environmentalmanagement system. During the reporting period, we did not experience any major environmentalincidents, nor were we subject to administrative penalties or criminal liabilities related to environ-mental issues.Leveraging a Building Management System (BMS), we implemented systematic control over lighting,AC, environmental safety, and energy usage. The system monitors energy consumption trends,equipment operating conditions, and environmental parameters, enabling automatic anomaly alertsand remote regulation, thereby continuously improving energy ef?ciency and operational safety. Wealso deployed an intelligent IoT-based environmental safety management system, enabling real-timemonitoring of temperature and humidity, as well as leak detection alerts. Through data-driven intelli-gent management, we have effectively reduced environmental risks, enhanced emergency responseef?ciency, and created a healthy and safe working environment for employees.We conduct regular environmental risk assessments and inspections to minimize environmental impacts.Currently, potential risks exist in areas such as energy ef?ciency improvement, clean energy utilization, andelectronic waste management. In response, we have implemented an environmental and energy manage-ment platform, regularly evaluate energy consumption in of?ce buildings, and carry out targeted energy-sav-ing initiatives. We have also undertaken low-carbon upgrades of data centers, adopted recyclable materialsand modular design in smart hardware to extend product lifecycles, and promoted the reuse of retiredelectronic and of?ce equipment to reduce our environmental impact.
Pollutant and Waste Management
As a company operating in a non-heavy-polluting industry, our operations primarilygenerate domestic wastewater, kitchen exhaust emissions, and solid waste. Wehave established the Management Measures for Solid Waste (Hazardous Waste)and comply with local regulations such as the Beijing Management Regulation on theManagement of Municipal Solid Waste, while adhering to the 3R principles (Reduce,Reuse, Recycle) to continuously minimize environmental impacts.
The kitchen fumes are treated by UV photooxidation equipment and electrostatic?lters. To realize the accurate management and control of the kitchen fumes, wereserve an online monitoring interface for the fume exhaust ?ue, so as to effectivelymonitor and control the fume exhaust in real-time in the future.Return air ?lters in fresh air handling units have been upgraded to ensure ?ltrationef?ciency and indoor air quality.
Waste gasesCooking
fumes
IndicatorSourceTreatment and emission reduction measures
Kitchen wastewater is pretreated through a sedimentation tank to remove largeparticles of pollutants and suspended matters, then introduced into an oil-waterisolation device to separate the oil in the wastewater, and then discharged to theoutdoor grease separation tank.The domestic sewage of our Beijing of?ce building is discharged to the municipalsewage treatment plant for secondary utilization.
Wastewater
Domesticsewage
We ensure that all solid waste complies with national disposal standards, with noincidents of environmental pollution or damage.Waste sorting is implemented through four-category bins with clear signage andguidance to enhance employee awareness.A small portion of hazardous waste, such as used batteries, waste ?uorescenttubes, used toner cartridges, and waste ink cartridges, is separately collected andtransferred to quali?ed professional agencies for harmless disposal.Solid waste
Non-hazardouswaste, with asmall portionofhazardouswaste
3536
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
3738
Note: The statistical scope includes 14 of?ce locations nationwide, such as our Beijing of?ce building and Tianjin Innovation Park.
Energy Consumption
Strengthening energymonitoring and control
Adoption ofenergy-savingproducts
TypeSpeci?c measures
Key performance in 2025
Diesel consumptionGasoline consumptionNatural gas consumptionElectricity consumptionTotal energy consumptionComprehensive energy consumption intensity
1.22 tons
8.57 tons
104,475 standard cubic meters
22,025.87 MWh2,860.32 tons of standard coal equivalent (TCE)
0.33 TCE per million yuan in revenue
Indicator2025
We actively promote the digitalization ofenergy management and empower ourcarbon management platform with AI,achieving measurement, automatic collec-tion, and real-time monitoring of energy datafrom key energy-consuming equipment,thereby realizing re?ned management acrossmultiple dimensions including energy alloca-tion, energy measurement, energy analysis,and energy early warning.
Water Resource ConsumptionOur water consumption is entirely sourcedfrom municipal water supply systems, ensur-ing stable, compliant, and legally securedaccess, with no disputes over water rights orrisks of water scarcity. We strictly comply withapplicable laws and regulations, including theWater Law of the People’s Republic of China andthe National Water Saving Action Plan, whileactively promoting water conservation aware-ness and implementing a range of water-sav-ing measures.
Water-savingrenovation
Water Resource Management Initiatives
Energy Management Measures
TypeSpeci?c measures
We have upgraded sinks in pantries and restrooms with energy-ef?cient multifunctionalaerator faucets.We have increased the frequency and scope of inspections for aging equipment: replacingfoot valves and related components in restrooms to prevent continuous water ?ow causedby equipment deterioration.Sponge citydevelopment
Our data centers, through the sponge city-based improvement, have integrated low-impactdevelopment technologies such as rooftop greening, rainwater reuse facilities, and perme-able paving. These measures aim to control runoff pollution and mitigate urban ?ooding,while enabling ef?cient rainwater utilization and improving the water environment.
We have deployed intelligent control systems forfresh air units, Daikin VRV AC systems, and ABBintelligent lighting systems. These systems enablecentralized monitoring and remote control of ventila-tion, air conditioning, and lighting equipment. Operat-ing parameters and schedules are optimized basedon seasons, time periods, and usage scenarios,achieving precise energy management and low-ener-gy operation.
We have upgraded the intelligent lighting control system, and replaced the lightingequipment and motors in the conference area of our Beijing of?ce building with moreenergy-ef?cient alternatives.
At 360 Security, we strictly adhere to the Energy Law of the People's Republic of China, the Energy Conservation Law of the People'sRepublic of China, and other relevant laws and regulations. By establishing a robust energy monitoring and energy-savingmanagement system, we systematically plan and implement energy ef?ciency improvement measures, actively promotethe adoption of advanced energy-saving technologies, and continuously enhance energy utilization ef?ciency.
Carbon management platform
Intelligent BuildingManagement System (BMS)
Development oflow-carbon datacenters
We have developed energy-ef?cient, low-carbon data centers by adoptingmeasures such as waste heat recovery, dynamic energy regulation, high-ef?ciencycooling systems, and sustainable LID (Low Impact Development) site design.
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
3940
Ecosystem and Biodiversity ConservationAt 360 Security, we adhere to eco-friendly principles in our business expansion,deeply integrating digital technology into our ecological protection practices.Through pilot initiatives such as the “AI + Zoo” smart project, we explore theapplication of AI in habitat monitoring and animal welfare management,promoting the integration of ecological conservation and technological innova-tion. By enabling precise monitoring of natural resource dynamics, we supportsustainable resource utilization and safeguard ecosystem integrity and stabili-ty. Meanwhile, we leverage internet platforms to promote biodiversity aware-ness, enhance public understanding, and mobilize broader societal participa-tion in ecological conservation.In terms of biodiversity conservation, we not only focus on species diversity but also emphasize the conservation and utilizationof biological genetic resources to ensure the sustainability of biological resources. We incorporate the ecological impact ofproducts throughout their lifecycle into our management framework and continuously explore environmentally friendly productdevelopment to reduce the environmental footprint of both our operations and products.
In May 2025, 360 Group, in collaboration with Wuhan Zero Point Technology, formed a special research team toconduct ?eld investigations and strategic cooperation discussions at the Nanning Zoo. Together, we explored asmart upgrade solution under the “AI + Zoo” initiative. The project aims to enhance habitat monitoring capabili-ties, optimize animal welfare management, and establish a China–ASEAN smart zoo demonstration zonepowered by arti?cial intelligence. This collaboration represents a practical exploration of applying AI technolo-gies to biodiversity conservation, demonstrating our commitment to leveraging technological innovation tosupport ecological protection.
Circular EconomyWe strictly comply with relevant laws and regulations, including the Circular Economy Promotion Law of the People’s Republic ofChina, the Green Packaging Evaluation Methods and Rules, and the Opinions on Accelerating the Establishment of a Green Productionand Consumption Legal and Policy Framework. We continue to develop a circular economy model aimed at building aresource-ef?cient and environmentally friendly enterprise, promoting ef?cient resource utilization and waste reduction atthe source.
Note: The statistical scope includes 14 of?ce locations nationwide, such as 360 Beijing of?ce building and Tianjin Innovation Park.
Circular Economy Management Initiatives
Key performance in 2025
Total water resource consumptionWater resource consumption intensity
Indicator
139,099 tons
16.00 tons per million yuan in revenue
2025年
At the smart hardware design stage, we actively integrate circular economy principlesby adopting recyclable materials and modular designs to extend product lifecycles.Green design
We extend the lifecycle of servers and other of?ce equipment through upgrades andrefurbishment, enabling reuse of retired electronic devices.Of?ce equipment upgrade
and renovation
Employees are allowed to purchase used electronic devices from the Company, suchas computers, after their service life, reducing electronic waste generation.Electronicsbuyback program
Retired but usable materials (e.g., lighting ?xtures and batteries) are repurposed inother scenarios where feasible. Of?ce paper and packaging materials are incorporat-ed into recycling systems to promote resource circulation.Reuse of othermaterials
TypeSpeci?c measures
Case:
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
可持续发展治理架构可持续发展管理机制ESG能力提升
EMPLOYEESSAFETY AND QUALITY OF PRODUCTS AND SERVICESDATA SECURITY AND CUSTOMER PRIVACY PROTECTIONINNOVATION-DRIVEN DEVELOPMENTETHICS IN SCIENCE AND TECHNOLOGYWIN-WIN COOPERATIONRURAL REVITALIZATIONSOCIAL CONTRIBUTION
Social Commitment
4344
Employees
We strictly adhere to the Labor Law of the People's Republic of China, the Labor Contract Law of the People's Republic of China, theLaw of the People's Republic of China on the Protection of Rights and Interests of Women, and the Provisions on Prohibition of ChildLabor, and all mandatory labor standards in the jurisdictions where we operate. We have established a systematic humanresource management system covering the entire employee lifecycle, including recruitment, performance management,career development, compensation and bene?ts, and labor relations. By continuously optimizing institutional design andstandardizing processes, we foster a fair, transparent, and ef?cient employment environment. While empowering employ-ees’ professional growth, we have also provided a solid talent foundation and organizational support for our long-termsustainable development.
We uphold principles of fairness and transparency in our recruitment and hiringprocesses. In accordance with our recruitment management policies, we formulateannual hiring plans and standardize end-to-end recruitment procedures to ensure fullcompliance with fair employment laws and regulations. We advocate diversity andequal opportunity, strictly prohibit all forms of discrimination, and oppose forced labor,abuse, and harassment. A rigorous age veri?cation mechanism is implemented duringrecruitment to ensure that no individuals below the legal working age are employed. In2025, with no incidents involving child labor, forced labor, or discrimination.
Taking into account our development stage and industry characteristics, potential risks in thehuman resources domain are primarily associated with key talent attrition, labor law compli-ance, organizational effectiveness, employee health and safety, and diversity and inclusionpractices. We apply a combination of quantitative indicators, such as turnover rates, number oflabor disputes, and employee satisfaction levels, to systematically assess the impact of theserisks on organizational stability, operational ef?ciency, legal compliance, and corporate reputa-tion. These risks are incorporated into our ESG priority risk management framework.
Four Corners Analysis of Employees
Recruitment
Governance
Standardized Employment
Impact, Risk and Opportunity Management
Indicators and Targets
Strategy
Risk/Oppor-tunity type
Description
Financial
impact
Magn-itude
Impacthorizon
Responsemeasures
We establish and continuously improveinternal labor compliance systems andstandardized procedures to ensure fullcompliance across recruitment, contracts,compensation, working hours, and termina-tion. On this basis, we conduct regular legaltraining for HR personnel, proactively identifyand mitigate risks, systematically identifyemployment risks, and achieve both ex-anteprevention and in-process monitoring. Wealso implement internal dispute mediationmechanisms to resolve issues ef?ciently andsafeguard employees’ rights and interests.
Failure to strictly comply withthe Labor Law of the People'sRepublic of China, the LaborContract Law of the People'sRepublic of China, and otherrelevant laws and regulations inlabor management directlyleads to the risk of labor disputelitigation and administrative?nes, with serious casespotentially resulting in criminalliability and damaging ourbrand image as an employer.
Labor disputes oradministrative penaltiesdue to non-compliance inlabor management willsigni?cantly increase ourdirect economic costs,erode current operatingpro?ts, and may raisesubsequent compliancemanagementinvestments, creatingongoing pressure on?nancial conditions.
Legalrisks
Medium
Short-term
The loss of core technicaltalent may weaken R&Dstability, slow productiteration, hindertechnological advance-ment, and reduce marketresponsiveness, therebyundermining productcompetitiveness, marketopportunities, andlong-term value creation.
We strengthen our intellectual property (IP)management system, enhance con?dentialitymechanisms for core technologies, andestablish competitive incentive schemes anda supportive talent development environmentto retain key personnel and ensure continu-ous innovation.Intensifying industrycompetition may lead to theloss of key technicalpersonnel, potentiallyaffecting product develop-ment and technologicalupgrades.
Technology
risks
High
Mid-to long-
termAI-driven transformationmay disrupt workforcestructure, impactingteam stability andoperational ef?ciency,weakening coordinationbetween R&D andoperations, andpotentially affectingvalue creation, long-termcorporate resilience, andtalent competitiveness.
We organize internal AI competitions andtraining programs to encourage employees tolearn and apply AI technologies. Theseinitiatives provide opportunities for skillenhancement and career development,enabling employees to transition fromrepetitive tasks to higher-value roles.
Rapid AI-driven technologicalevolution may createstructural pressures ontraditional roles, leading toskill mismatches or jobdisplacement, which mayaffect employee morale andorganizational stability.
Market risksMedium
Short-
term
This approach enhancesinnovation capacity andcollaboration ef?ciency,improves talentutilization and organiza-tional effectiveness,reduces resource lossdue to turnover ormiscommunication, andstrengthens long-termcompetitiveness andvalue creation resilience.
We regard diversity, equity, and inclusion asour core values, establishing anti-discrimina-tion policies and codes of conduct to solidifyour cultural foundation at the institutionallevel. We actively eliminate biases inrecruitment, promotion, and leadershipdevelopment processes to ensure fairopportunities, and enhanced understandingand strengthened belonging through theestablishment of diverse employee resourcegroups and open communication platforms.Additionally, we effectively enhanceemployee well-being through tailoredbene?ts, mental health support, and ?exiblework arrangements.
By fostering a diverse andinclusive organizationalculture, we enhanceemployees’ sense ofbelonging and well-being,thereby unlocking innovationpotential to supportsustainable development.Operationalopportunities
Medium
Long-
term
Risk andopportunityidenti?cation andassessment
Aligned with our operational realities, we have established a full-lifecycle human resources riskmonitoring system covering recruitment, employment, and exit stages. Through regular employ-ee surveys and other mechanisms, we dynamically track key indicators such as talent mobility,labor relations, workplace safety, and training effectiveness, supported by trend analysis. A riskearly warning mechanism has been implemented with de?ned thresholds to promptly identifyabnormal ?uctuations or potential non-compliance, providing decision-making support tomanagement and enabling proactive risk mitigation.
Monitoring and
management
of risks andopportunities
We adopt differentiated management strategies based on the nature and severity of risks:
Mitigate key talent attrition risks through retention incentives, talent pipeline development, andstructured knowledge management systems;Mitigate and manage legal and regulatory compliance risks through institutional frameworks,standardized processes, and continuous training;Address employee health and safety risks by improving protective facilities, strengtheningsafety culture, and establishing emergency response mechanisms;Mitigate organizational structure and ef?ciency risks through process optimization, adoption ofdigital tools, and ?exible organizational design.
Response and
mitigationmeasures
100% social insurance coverage for employees
No major safety incidents
CompletedCompleted
TargetsProgress in 2025
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
4546
In addition to established recruitment platforms, we actively promote an internal talent referral mechanism, encouragingemployees to recommend high-quality candidates and fostering a diversi?ed and collaborative talent acquisition ecosystem.Our recruitment channels include online platforms (of?cial website, social media accounts such as Xiaohongshu), campusrecruitment, on-site job fairs, headhunting services, university–enterprise partnerships, and internal referrals.
Diversity and inclusion are critical to building a strong and resilient workforce. We are committed to fostering an inclusive work-place that transcends boundaries of gender, age, nationality, race, and other dimensions, providing equal opportunities and anopen environment for the growth and development of all employees.We are dedicated to building a fair, just, safe, inclusive, and friendly work environment. We strictly adhere to non-discriminationprinciples and do not differentiate based on nationality, race, gender, age, religious belief, or cultural background. We fullyimplement gender equality across areas such as equal pay for equal work, career development, and employee participation.
Following a philosophy that ensures internal equity and external competitiveness, our compensation model is built on positionvalue, performance contribution, and long-term incentives. Through a scienti?c job evaluation system, we align position value levelswith career development pathways, clearly de?ning compensation structures and salary ranges for each role. Employee compen-sation is determined based on a comprehensive assessment of performance, contribution, capabilities, and competencies.We conduct annual compensation reviews and dynamically adjust compensation based on factors such as corporate performance,operational conditions, individual annual performance, cost-of-living indices, and market trends. Employees who have concernsregarding performance evaluations may communicate with their supervisors or utilize formal grievance procedures to safeguardtheir rights and interests.
We provide a multi-tiered and personalized bene?ts framework to continuously enhance overall competitiveness and employeesatisfaction.
Employee Compensation and Bene?tsCompensation System
Bene?ts System
Online Recruitment Channels
Workforce Composition
Diversity Composition
CampusRecruitmentPosters
CampusPresentation
Posters
By academic quali?cation:
1,0683,561
Total numberof employeesNumber of employees withmaster's degrees or higherNumber of employees withbachelor's degreesNumber of employees withassociate degreesNumber of employeeswith other degrees
By position
3,0181,759
Number of R&D personnelNumber of salespeopleNumber of management personnel
We fully contribute to social insurance and housingprovident funds (“?ve insurances and one housing fund”) forall employees.During the reporting period, our social insurance coveragerate reached 100%.
Statutory bene?ts
We provide employees with personal accident insurance,critical illness insurance, supplementary medical insurancefor outpatient and inpatient care, supplementary maternityinsurance for female employees, and supplementarymedical coverage for employees’ children.
Medical bene?ts
We strictly adhere to the standard working hours stipulatedby labor laws to ensure a balance between work and life forour employees. We fully implement vacation bene?ts: Inaddition to public holidays and statutory holidays, employ-ees also enjoy paid annual leave as well as paid leave formarriage, bereavement, maternity, and childcare.
Leave bene?ts
We organize annual health examinations for all employees.In 2025, 100% of employees received health check-upservices.Regular health check-ups
Employees may apply for care grants in life events such asmarriage, childbirth, hospitalization, or the passing ofimmediate family members.Care grants
To enhance communication, cohesion and coordination, weprovide standardized team-building budgets, allowingteams to organize activities that promote collaboration andengagement.
Team building
During the Dragon Boat Festival, Mid-Autumn Festival, andSpring Festival, we prepare exclusive surprises for employ-ees.Festive bene?ts
Employee engagement activitiesWe regularly organize a wide range of interactive andrecreational activities to enrich employees’ work experi-ence.Service awardsEmployees who reach tenure milestones receive custom-ized recognition awards (currently at 5-year and 10-yearmilestones) in appreciation of their long-term contributions.
Other bene?tsComplimentary meals (including late-night meals), ?tnessfacilities, shuttle bus services, and group wedding ceremo-nies.
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
4748
We strictly comply with applicable laws and regulations, including the Trade Union Law of thePeople’s Republic of China and the Provisions on Democratic Management of Enterprises. We haveestablished a democratic management system centered on the Employee RepresentativeCongress and supported by trade union organizations. Through multiple channels, such asEmployee Representative Congress meetings, staff meetings, suggestion boxes, and employeesatisfaction surveys, we ensure employees’ rights to information, participation, expression, andsupervision.
Guided by a people-oriented philosophy, we are committed to creating a supportive and ful?lling workplace environment thatfosters both professional and personal well-being. We continuously carry out “Employee Home” initiatives, with a focus onbalancing employees’ work and personal lives, as well as supporting mental health. We provide targeted assistance to employ-ees facing special dif?culties or belonging to vulnerable groups.In accordance with the Regulations of the People’s Republic of China on Settlement of Labor Disputes in Enterprises and the Rules onthe Organization and Operation of Labor Dispute Mediation Committees in Enterprises, we have established the 360 Group LaborDispute Mediation System and set up a dedicated Labor Dispute Mediation Committee. The committee is responsible for theprevention and resolution of labor disputes, aiming to address con?icts at an early stage and ensure that disputes are handledpromptly, lawfully, and appropriately.
We hold regular Employee Representative Congress meetings to deliberate on majorcorporate decisions such as the formulation and revision of rules and regulations andwelfare distribution plans, ensuring employees' rights to be informed, to participate, toexpress their views, and to exercise oversight.
Democratic communication
Democratic Communication Mechanism
Employee Care and Support
Labor Disputes
At 360 Security, we have established a regular employee feedback researchmechanism to capture employee needs and expectations. Through surveys,focus group discussions, and other engagement formats, we collect feedbackacross various management areas, including IT support, HR services, andadministrative services. Survey results are analyzed and discussed in a timelymanner, enabling us to address identi?ed issues, continuously improveemployee satisfaction, and re?ne management strategies. This processsupports the shared growth and long-term development of both the Compa-ny and our employees.
Employee Satisfaction
EmployeeRepresentativeCongress mechanism
To ensure effective communication, we have established multiple accessible channels,including reporting and grievance email systems. Employees who are not satis?ed with thehandling outcomes by functional departments may escalate their concerns by submittingfeedback directly to the CEO via email. All grievances are addressed in a timely and impar-tial manner, and outcomes are communicated appropriately to ensure transparency andeffectiveness.Grievance channelimprovement
Nursing roomHealth Consultation and Treatment
Employee Satisfaction Survey Poster
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
4950
We place talent development at the core of our strategy andcontinuously enhance our internal training system. Based on jobcompetency requirements and career development needs, weprovide a structured, multi-tiered, and diversi?ed training frame-work to support employee growth and enable high-quality corpo-rate development.
We have established a standardized position and job grading system and developed a “dual-track” career developmentsystem. Based on business characteristics and job attributes. This framework is designed to support employees withdiverse skill sets and career aspirations, forming a comprehensive and well-structured promotion system.We continuously iterate our Star Up Certi?cation System and advanced courses,optimizing evaluation methods to ensure more scienti?c and accurate assess-ments of managerial capabilities. During the reporting period, we deliveredcustomized training sessions aligned with business needs, focusing on practicalapplication and problem-solving.
Employee Training
Employee Promotion
Employee Training and Development
Leadership training
Through regular “Tech Talk” sessions, we have established a cross-departmen-tal and cross-level knowledge-sharing platform. Internal and external experts,as well as business leaders, are invited to share insights on cutting-edgetechnologies and practical experience.
Professional skills training
In addition to standardized onboarding programsfor new hires, we organized “Planet Gas” trainingsessions. We also hosted internal AGENT compe-titions, adopting a systematic and practice-ori-ented approach to enhance employees’ capabili-ties in AI-powered of?ce applications and innova-tion.
General skills training
Key performance in 2025
Vertical career development
Horizontal career development
To fully tap into employees' strengths and maxi-mize each individual's value, the company hasestablished horizontal development mechanismsboth between the management and specialisttracks and within specialist sub-disciplines,providing pathways for employees to transitionbetween the M/S tracks.
General staff training participation rate 100%
To encourage continuous professional growth,employees may advance within their respectivecareer tracks, either the management track (M) orthe specialist track (S).Management promotions are primarily based onperformance contribution, combined with acomprehensive evaluation of leadership capabil-ities, development potential, and alignment withthe Company’s core values, ensuring the overallquality of the management team.Specialist promotions are also performance-driv-en, with a strong emphasis on professionalexpertise and technical capabilities, while takinginto account alignment with the Company’scultural values.
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
5152
We strictly comply with relevant laws and regulations, including the Emergency Response Law of the People’s Republic of Chinaand the Measures for the Emergency Administration of Environmental Contingencies. We have developed internal managementrules such as the Emergency Plan for Work Safety Accidents, the Warehouse Safety Management System, the Crisis ManagementMechanism for Abnormal Visitors, the Accident Risk Identi?cation and Assessment Report, and the Emergency Plan for Food Safety inthe 360 Restaurant. We have also set up a dedicated Emergency Command Center for Work Safety, which de?nes key safetypriorities and clari?es accountability across all levels, ensuring a safe and healthy working environment. Our emergencyresponse plans clearly categorize incident types and establish a three-tier response mechanism, ensuring that emergencyenvironmental incidents are handled in a compliant manner. In addition, we conduct regular safety risk assessments andhazard identi?cation inspections to minimize the likelihood and impact of safety incidents.
Safe Operations
We strictly comply with applicable laws and regulations, including the Law of the People's Republic of China on Prevention andControl of Occupational Diseases, and continuously improve our standardized occupational health management processes toenhance overall management effectiveness and safeguard employee well-being. We place strong emphasis on employeehealth and have established dedicated health management rooms. Employees are entitled to free consultations uponpresenting their employee ID cards, where professional health advisors provide medical guidance and necessary basicmedications.
Occupational Health ManagementOccupational Health and Safety
Key performance in 2025
Investment in work-related injury insurance
Over 4,000,000 yuan
Employee work injury insurance coverage rate
100%
Key performance in 2025
Safety drill coverage rate
100%
Emergency Organizational Structure
Emergency Rescue Command Department
On-site Command DivisionEmergency Of?ce
Rescue
Team
Security andGuard Team
Logistics Support
Team
Medical Treatment
Team
Technical Support
Team
Fire Drill in 2025Safety Awareness Poster
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
5354
Safety and Quality of Products and Services
We have established a systematic product and service quality management framework, clearly de?ning roles and responsi-bilities, standardizing processes, and embedding continuous improvement requirements. This ensures that the entire lifecy-cle from R&D to delivery and after-sales service is controllable and reliable, providing a solid foundation for product safetyand customer trust. During the reporting period, we recorded no major quality incidents.
We maintain a customer service team composed of several hundred professionals, providing usersupport across multiple business areas, including software technical support, hardware pre-sales andafter-sales consulting, gaming services, and advertising sales.
Governance
Strategy
Four Corners Analysis of Product and Service Safety and Quality
Organizationalstructure
We have developed and continuously updated internal policies such as the User Experience White Paper,the User Service White Paper, and the User Operations White Paper. During the reporting period, our subsidi-ary, 360 Fang Cloud (Hangzhou) Technology Co., Ltd., successfully obtained ISO 9001 Quality Manage-ment System certi?cation. Our “360 Large Model Safeguard” passed comprehensive testing by theNational Cybersecurity Product Quality Supervision and Testing Center (Third Research Institute of theMinistry of Public Security), and was awarded the Enhanced-Level Certi?cation for Large Model SecurityEvaluation Systems.
Policyframework
Operationalprocesses
ISO 9001 QualityManagementSystem Certi?cation
Cybersecurity ProductCerti?cation
Large Model Security Protection
Barrier Capability Veri?cation
Certi?cate
We have established a full lifecycle quality assurance system to deliver more insightful,re?ned, and ef?cient service support:
During the initial stages of product development and launch, we conduct internal testing andpublic beta programs to fully capture user needs, carry out dedicated user experience initia-tives, and accelerate product iteration;During the growth and maturity phases, we continuously monitor user feedback in real time,ensure smooth access to service channels (400 hotline, online support, email), and conductcomprehensive analysis to identify trends and emerging issues;Throughout the entire product lifecycle, product issues that affect user experience are followedup with a closed-loop process. Standard procedures for each stage, including problem discov-ery, reporting, resolution, veri?cation, and post-mortem review, are clearly de?ned. Issues areclassi?ed, managed, and addressed by priority level.
Risk/Oppor-tunity type
DescriptionFinancial impact
Magni-tude
Impacthorizon
Response measuresWe propose a dual-trackgovernance strategy of “exter-nal security and platform-nativesecurity” and launched the 360Security Agent to build anAI-native security protectionsystem. In practical applica-tions, it has been deployed inscenarios such as APT attacktracing, security operations, andvulnerability protection, playingan important role in tracingcyberattacks during the AsianWinter Games and hackerattacks in Taiwan.
As large modeltechnologies rapidlypenetrate key sectorssuch as government,?nance, and energy,they face ?ve majorsecurity risks:
infrastructure security,content security, dataand knowledge basesecurity, agentsecurity, and endpointsecurity.
Failure to effectivelymanage these risks mayundermine customertrust, disrupt partnershipsin key sectors, andweaken market penetra-tion. In addition, incidentresponse and complianceremediation mayconsume signi?cantmanagement resourcesand increase operationalcosts, constraininglong-term value creation.
Compliance
risksHigh
Mid- to
long-term
We streamline hotline voicequeues, introduce AI-assistedonline customer service;establish service response timecommitments; and strengthenfrontline authorization andproblem-solving capabilitiesthrough dedicated complainthandling specialists andenhanced training.
360 Security is in acritical period oftransformation fromtraditional internetservices to a dual-driv-en model of 'AI +security', and thecompetition in the AInew product market isintense. Poor serviceexperience may leadconsumers to switch toother products andservices.
If the service experience ispoor and user churnincreases, it will weakenthe acceptance of newproducts in the market,raise customer acquisitionand retention costs, affectthe penetration capabilityof core business, restrictthe optimization ofrevenue structure and therelease of growth poten-tial, thereby posingchallenges to the pace ofstrategic transformationand long-term competi-tiveness.
Serviceexperience
andcustomercomplaint
risks
MediumShort-
term
High
Mid- to
long-term
Leveraging our proprietary largemodel capabilities, we imple-ment the dual-track “AI +Security” strategy, committed toempowering the digital transfor-mation of all industries with AI.Our 360 Security Agent hasbeen deployed across 18 sectorssuch as government affairs,energy, and ?nance to buildnext-generation intelligentsecurity systems.
In October 2025, therevised CybersecurityLaw introducedprovisions supportingAI development andsecure applications.The 15th Five-Year Plansuggests elevating thecomprehensiveimplementation of theAI Plus Initiative to anational strategy.
Favorable policies expandmarket opportunities forAI technology and securityapplications, acceleratethe penetration of ourcore technologies into keyindustries, expand newbusiness growth drivers,enhance the marketcoverage and valuecontribution of coreproducts, and strengthenthe resilience and sustain-ability of the pro?tstructure, injecting strongmomentum for the releaseof long-term value.
Policyopport-unities
National Information SecurityService Quali?cation—Level 3 inSecurity Engineering Certi?cate
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
5556
We have developed an “APP Full Lifecycle Security Management Platform,” embedding automated security tools intoR&D systems to establish a comprehensive risk identi?cation framework across secure coding, reinforcement, testing,operations, and component management. Currently, the security management platform has been applied to APPproduct security management within the Group and its subsidiaries, serving multiple business lines.In November 2025, we released the White Paper on Large Model Security, which systematically summarized the ?ve keyrisk categories faced by large model operations for the ?rst time: infrastructure, content, data and knowledge base,agent, and endpoint security.
We regard product quality as the cornerstone of our business. We have built a comprehensive quality management systemaligned with our “AI + Security” strategy, covering product R&D, large model applications, and end-to-end security protection.
We continuously deepen the “ALL IN AGENT” strategy, leveraging our proprietary trillion-parameter large model 360Zhinao to enable AI transformation across our product portfolio. In 2025, the latest model 360 Zhinao 3-o1.5 achievedstrong performance in third-party benchmark evaluations.At the application level, we launched the country's ?rst Super Search Agent—the Nano AI Super Search Agent, capa-ble of end-to-end automation, including “understanding intent—automated process planning—automated taskdecomposition—autonomous tool invocation—automated execution—delivering results,” supporting multimodalsearch input and multi-format result output.
Impact, Risk and Opportunity Management
Product Quality Management
Indicators and Targets
Risk and opportunity identi?cation and assessment
During security operations, the platform integrates external vulnerability databases and threat intelligence toenhance emergency response capabilities, supported by large-scale device monitoring and big data security analyticsfor real-time threat detection.In 2025, we launched the 360 Security Agent, using the 360 Security Large Model as its brain. Through capabilitiessuch as task orchestration, command scheduling, and memory storage, we have developed over 100 expert-levelagents in the security ?eld, with a focus on core security scenarios such as automated threat hunting, in-depth analy-sis and judgment, and threat attack tracing, achieving 24/7 automated monitoring.
Risk monitoring and early warning mechanism
With the security management platform, we implement a closed-loop vulnerability management system coveringdetection, response, and remediation, supported by vulnerability intelligence subscriptions, crowdsourced testing,emergency response, and patch deployment services to minimize vulnerability threats.Based on the dual-track governance strategy of “bolt-on security + platform-native security” proposed in the WhitePaper on Large Model Security, the Company has built a full-chain security defense line: bolt-on security enablesreal-time monitoring and active defense of computing hosts, software ecosystems, and input-output content through“model-to-model governance.” Platform-native security deeply embeds security capabilities into the core componentsof large models, solidifying the security foundation from the root.Emergency response and vulnerability governance: we have established the core strategy of “supervising AI with AI,and governing Skill with Skill.” The 360 Security Cloud team exclusively discovered the high-risk vulnerability (0Day)of OpenClaw Gateway WebSocket with no authentication upgrade, promptly assisting in cutting off the risk sourceacross the network, and received of?cial email con?rmation from the founder of OpenClaw.
Risk response and mitigation mechanism
No major quality incidentsCompleted
TargetProgress in 2025
Technology-driven quality enhancement
In the ?eld of digital security, we launched the 360 Security Agent, using the 360 Security Large Model as the brain,and built over 100 expert-level intelligent agents in core scenarios such as automated threat hunting, deep analysisand judgment, and threat attack tracing, supporting enterprises in achieving 24/7 automated, low-cost, high-precisionintelligent protection. At period end, we had identi?ed a total of 60 APT organizations, accounting for 98% of thenational total. In June 2025, we collaborated with the CNVD and other institutions to successfully identify the Informa-tion, Communications and Electronic Force Command (ICEFCOM) of the Taiwan Democratic Progressive Party as thesource of cyber attacks, jointly releasing an investigation report that demonstrated our technical strength in nation-al-level cybersecurity defense.
AI empowering security product quality
In response to risks such as content safety, privacy leakage, and mislead-ing hallucinations during the application of large models, we independent-ly developed the large model security guard product solution 360 Shield,which ?rst proposed the concept of “model-controlling-model”—using thecapabilities of large models to ensure the security of the large modelsthemselves. The 360 Shield features a multi-layer content guard systemconsisting of “input risk identi?cation—large model processing for secureresponse—secondary output detection.”In 2025, 360 Shield was selectedin the 2024 Outstanding Typical Case for Innovation Development in the FutureIndustry by the Ministry of Industry and Information Technology, becominga landmark product in the ?eld of arti?cial intelligence security.
Large model security assurance
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
5758
Customer Service ManagementAt 360 Security, we have always regarded user satisfaction as the core of product development, establishing a customerservice system that covers all user touchpoints, dedicated to providing users with professional, ef?cient, and warm serviceexperiences.We have established a comprehensive responsible marketing management system, with close collaboration among multi-ple departments (User Operations, Marketing, Legal, and Public Affairs departments). We regularly hold special seminarsto conduct internal self-inspections of our products, while also learning and promoting relevant laws and regulations, andanalyzing industry cases to ensure that marketing activities are compliant and orderly. If users raise concerns on marketingcontent, they can provide feedback through the 360 product feedback and reporting channels, as well as various customerservice channels, with our highest priority given to addressing these issues. Complaints related to marketing are ?aggedwithin our online customer service systems and prioritized for manual handling to ensure timely and appropriate resolution.
We actively participated in the development of industry standards. In June 2025, the technical speci?cation GeneralCapability Requirements for Large Model Application Delivery Vendors, led by the CAICT and involving 360 and companies,was of?cially released. It clari?ed the overall capability requirements for large model application delivery vendors infour aspects: basic capabilities, large model service capabilities, industry practice capabilities, and project quality andrisk management capabilities. In terms of commercialization, the 360 Security Large Model has been implemented inindustries, including government affairs, energy, and ?nance, completing testing and application in the real environ-ments of 500 users.
Service delivery quality management
Responsible Marketing
Optimizing Customer Service MechanismWe have established a diversi?ed customer service chan-nel matrix, including hotlines, online customer services,email, and in-product feedback channels, with prominentaccess points on our of?cial website and various productinterfaces to ensure users can easily access servicesupport. Currently, we have hundreds of professionalcustomer service personnel covering multiple businessareas such as technical software support, pre-sales andafter-sales hardware consulting, gaming services, andadvertising sales, responding comprehensively to varioususer demands.During the reporting period, we continuously revised the User Complaint Handling Mechanism and established a comprehen-sive complaint handling process covering reception, acceptance, veri?cation, resolution, and feedback, ensuring that usercomplaints are responded to promptly and handled appropriately. Meanwhile, we assigned dedicated personnel tospeci?cally handle user complaints from third-party platforms such as the Internet Information Service ComplaintPlatform, the national 12315 platform, and Black Cat. The 360 Community serves as a public communication platform,where our staff publicly respond to user feedback and suggestions, enhancing service transparency.
After-sales Service Management
Product TeamCustomer Service / OperationsManager / VP
Understand user questions and needs
360-related
inquires
Reach agreements
with the user
Closed-loop resolution
Escalate tomangers/VPs
Provide andoptimize solutions
Non-360-related
inquires
Resolved?NOYES
Unable to reachagreements; usersmaking complaintsagainst the servicestaff; or usersrequiring anescalation
Severe problems:
e.g., signi?cant?nancial loss to theuser, injuries, masscomplaints, etc.Formulate a clearconclusion andconduct a review ifnecessary
Escalate to
customerservice/operations
manager
Customer Complaint Handling Process
Respect users, communicate proactively, and prioritize meeting their reasonable demands.Ensure timeliness and achieve closed-loop resolution for user issues.Analyze the root cause, draw broader insights from individual cases / Continuously identify and drivebusiness improvements.
Basic processing requirements:
Customer Service Access
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
5960
Customer Relationship Management
Customer Satisfaction Surveys
Product Knowledge PopularizationIn terms of product knowledge popularization, we continuously publish user guides, product updates, and new versiontrial campaigns through channels such as the 360 Community, Help Center, and Product Knowledge Q&A, providing userswith convenient self-service access to product knowledge, and helping them better understand and use the products.We have established a diversi?ed user outreach system. We have set up 360 fan clubs and customer service accountson social platforms such as Douyin, WeChat, Bilibili, and Xiaohongshu to publish product user guides and enhance users'understanding of 360 Security. On the 360 user community platform, we continuously update product dynamics and userguides, and conduct new product and organize trial campaigns for new products and versions. The Help Center andProduct Knowledge Q&A provide users with self-service access to acquire product knowledge.
In 2025, we conducted multiple rounds of structured user research as planned, with high-frequency coverage across four corebusiness segments: internet services, smart hardware, gaming, and AI cloud storage, encompassing a range of ?agshipproducts. By continuously capturing the voice of the customer, we accurately identi?ed evolving user needs and enabled agileproduct iteration and experience optimization. Our surveys achieved broad demographic coverage, including government andpublic sector employees, professionals in healthcare, legal, and ?nancial industries, R&D personnel, corporate executives,general staff, media and design professionals, educators and researchers, as well as small business operators, students, andother user groups, forming a highly representative user feedback base.For top-priority user feedback issues, we establish dedicated task forces to conduct in-depth analysis and drive targeted optimi-zation initiatives. By strictly aligning with user suggestions, we actively advance improvement roadmaps to effectively respondto user expectations.
After-sales Service Management
User Engagement and Brand ActivitiesWe have actively innovated in user engagement by organizing the “360 User Appreciation Festival” and four major AIcompetitions, where business leaders engage directly with users in of?ine settings to foster co-creation and experienceexchange. With a focus on core products such as Nano AI, 360 AI Writing, 360 Safeguard, and our browser, we havehosted multiple of?ine “Product Exchange Sessions” to gain in-depth insights into the needs of younger user groups andpromote collaborative product development and optimization. During the fourth session, held at universities in Beijing, weengaged face-to-face with over 50 students. Product managers responded directly to user feedback on-site, forming aclosed-loop interaction mechanism of “demand collection – product improvement – user validation.”In the gaming sector, we held the 2025 World of Warships Day and the World of Tanks Championship International (WCI)in November, featuring competitions among several top international teams. Additionally, we invited users and popularstreamers to participate on-site, enhancing communication with users.
The 360 User Appreciation Festival in 2025The 2025 Product Exchange MeetingThe 2025 World of Warships Day
Product Knowledge Help CenterUser Guide Posts on Xiaohongshu
Our customer service team has consistently won user trust through warm and human-centered service, receivingbanners, appreciation letters, and online praises throughout the year. Our heartfelt services, such as on-site assis-tance and helping the elderly solve technical issues, have received high praise from users.Case:
User Appreciation Banners Assisting Elderly Users
with Technical Issues
Recognition and Gratitude fromVarious Government and Enterprise Clients
After-sales Service Training
Enhancing Service Ef?ciencyWe actively embrace AI-enabled new quality productive forces, widely applying the 360 Zhinao model in scenarios suchas multimodal user voice analysis, AI customer service, and AI quality inspection, signi?cantly enhancing service ef?cien-cy and depth. We have introduced AI-assisted capabilities into our online customer service system and optimized thevoice queue structure of our membership service hotline, delivering a more convenient and ef?cient user experience. Inaddition, we have implemented over one hundred optimizations across more than ten platforms and tools, including userfeedback platforms, VoC systems, and hotline service systems, to accelerate response times and reduce customerwaiting time. Marketing-related complaints and reports are assigned elevated priority. Within our online customerservice tools, such cases are clearly ?agged and routed directly to human agents. Upgrading After-Sales ServiceWe have upgraded after-sales service policies for our smart hardware business by extending warranty-equivalentservices to devices within 3 months after warranty expiration, providing users with an enhanced service experience. Thecustomer service team conducts regular training and assessments, holding specialized training sessions for new andexisting employees throughout the year, covering areas such as business knowledge and service skills. We organizedcerti?cation exams for new employees and on-the-job assessments for existing employees, continuously reinforcing theimplementation of service standards. Our knowledge base system has been upgraded, providing solid support for theimprovement of service quality.
360 Community
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
6162
Data Security and Customer Privacy Protection
At 360 Security, we place a high priority on data security and customer privacy protection. We strictly comply with applica-ble laws and regulations, including the Cybersecurity Law of the People’s Republic of China and the Personal InformationProtection Law of the People’s Republic of China. We continuously enhance our information security management systemto ensure robust protection across all business operations. We have established and continuously re?ned a comprehensiveset of internal policies and frameworks, including the 360 Group Data Security Management Policy, the 360 User Privacy Protec-tion White Paper, the 360 Group Personal Information Protection Policy, the Data Security Training Policy, the Data Classi?cation andGrading Policy, the Information Security Risk Management Standards, the 360 Group Cybersecurity Incident Response Plan, and theSecurity Incident Operations Guidelines. These policies cover the entire data lifecycle, including collection, storage, use, trans-mission, and disposal, clearly de?ning operational standards and compliance requirements at each stage.We have established a governance structure that covers the entire process of decision-making, execution, and oversight,forming a four-tier management mechanism led by the Data Security Committee, with collaborative promotion by variousdepartments, independent oversight by data audit institutions, and speci?c implementation by execution departments. Formobile products, we set up a dedicated APP team to speci?cally discuss major data privacy issues. In parallel, our Informa-tion Security Department and Data Platform Department are responsible for the full lifecycle management and mainte-nance of business data.
Governance
Strategy
Four Corners Analysis of Data Security and Customer Privacy Protection
Data Security Committee
Data Audit InstitutionExecutive Department (Business Department)Organizational Structure of the Data Security Committee
During the reporting period, we successfullypassed the Data Security Service CapabilityAssessment, achieving the highest level (Level IIcerti?cation) in both data security developmentand data security assessment. This certi?cationprovides strong institutional assurance andtechnical support for our data security andcustomer privacy protection practices.
Data Security Service CapabilityAssessment Quali?cation Certi?cate
360 Security adopts the corestrategy of “using AI to combatAI,” leveraging the 360 securitylarge model to upgradetraditional rule-based vulnerabili-ty detection into a learning-driv-en intelligent model. We havedeveloped the swarm agent forvulnerability mining, enablingautomated analysis anddiscovery of security vulnerabili-ties, requiring only a vulnerabilityID input from operators.
The emergence of hacker
agents enables attackers to
train AI systems to autono-
mously perform the full
lifecycle of vulnerability
discovery, exploitation, and
cyberattacks at scale. A single
human attacker can control
dozens or even hundreds of
such agents, transforming
cyber confrontation from
“human vs. human” to “human
vs. machine.”
If our defense systems failto evolve in parallel, wemay face signi?cantlyhigher security thresholdsfor core operations anderosion of customer trust.Sustained increases indefense-relatedinvestments could placepressure on competitive-ness and operationalstability, thereby constrain-ing business expansion andlong-term value creation.
Marketrisks
Risk/Oppor-tunity type
DescriptionFinancial impact
Magn-
itude
Impacthorizon
Response measures
High
Short- tomid-term
Marketing andCommunication
CenterInternal Auditand Supervi-sion CenterDataPlatformInformation
SecurityLegal Affairs
CenterEcology andStrategic Cooper-
ation CenterPrivacyDepartment
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
6364
Operational
risks
We have developed multipleexpert models, includingvulnerability detection anddisposal models and alertanalysis models, which operatecollaboratively, forming thefoundation (“brain”) fornext-generation security agents.
A single model is insuf?cientto cope with the complex andever-changing securityscenarios, as vulnerabilitydiscovery and disposalheavily rely on humanexperience, leading toinef?ciency and a highlikelihood of errors.
This will result in a mismatchbetween security operationef?ciency and responsespeed to evolving attacks,increasing the pressure onbusiness continuityassurance, shaking thefoundation of customer trustin product reliability, andconsequently constrainingthe market penetrationcapability of our corebusinesses, delay therealization of strategic value.
High
Mid- tolong-term
Marketopportunities
We have launched the 360Security Agent to build anAI-native security capabilityframework. These agents havebeen widely deployed inscenarios such as APT attacktracing, security operations, andvulnerability protection, and havedemonstrated strongperformance in real-worldapplications such as cyberattackattribution.
The year 2025 was widelyregarded as the “Year ofAgents” in the industry. Asagents become a centralparadigm in the AI industry,demand for agent-focusedsecurity solutions is rapidlyincreasing.
The explosive growth of theagent ecosystem opens newavenues for security businessexpansion, creating valueopportunities acrossgovernment agencies,enterprise, and industrialsectors. It strengthens ourcompetitive positioningwithin the AI ecosystem,diversi?es sustained revenuestreams, and supportslong-term value growth andbusiness model optimization.
Medium
Mid- tolong-term
To effectively address the information security risks, we conduct risk assessments in accordance with our Information SecurityRisk Management Standards, integrating both management and technical approaches. Based on assessment outcomes, weimplement targeted risk mitigation measures and continuous improvement initiatives to ensure that identi?ed risks arecontrolled within an acceptable range in a timely manner.
360 Security has established an internal monitoring system targeting data security risks, continuously enhancing itsdata security risk monitoring capabilities, including proactively identifying core data asset protection objects, dynami-cally monitoring data distribution and ?ow, intelligently analyzing and identifying security risks during the collection,sharing, transmission, and processing of data. We adopt differentiated response strategies based on risk levels andensure timely reporting of data security incidents.
Based on our data classi?cation and grading framework, we implement differentiated monitoring measures for dataassets of varying risk levels and have developed digitalized capabilities for data security situational awareness.We also integrate national- and industry-level threat intelligence on data security to continuously re?ne and enhanceour risk monitoring capabilities.
Impact, Risk and Opportunity Management
To ensure effective response to sudden security incidents, we have developed the 360 Group Cybersecurity Incident Emer-gency Plan and the Security Incident Operation Guidelines, establishing a comprehensive emergency response system forcybersecurity incidents. We regularly conduct emergency drills to continuously enhance our emergency response capabilitiesand minimize the impact of sudden incidents on business operations. During the reporting period, we did not receive anyadministrative penalties due to data security issues.The types of data security incidents at 360 Security mainly include three categories:
Indicators and Targets
With the launch of products,such as AI of?ce and nano AI,user-input text, uploadedimages or videos, and voicedata, must be processed onservers, creating potentialrisks of data privacy leakage.Issues such as promptinjection attacks, dataprivacy breaches, hallucina-tions, and agent loss ofcontrol are becomingincreasingly prominent in theapplication of large models.
If data privacy and agentsecurity risks are noteffectively managed, it mayundermine user trust in theproduct, hinder large-scaledeployment of coreapplications, and increaselong-term compliance andtechnical protection costs.This could weaken productcompetitiveness andcustomer retention, placingsustained pressure onbusiness stability and growthresilience.
High
Short- tomid-term
We implement dataencryption for transmissionand processing, and do notretain user data afterprocessing is completed.We clearly de?ne authoriza-tion scopes and personal datasharing lists in our privacypolicies, obtaining userconsent prior to datacollection.We have also launched theLarge Model Safeguard toaddress risks such as attacks,data leakage, hallucinations,and agent misalignment.
Information Security Assurance
Risk/Oppor-tunity type
DescriptionFinancial impact
Magn-
itude
Impacthorizon
Response measures
Risk identi?cation
Each business unit needs to conduct data security risk assessments based on the risks associated with their own data.The risk assessment can be divided into self-assessment and inspection assessment. The self-assessment is initiatedinternally by the business unit to identify system vulnerabilities, aiming to implement security management and reducethe security risks of assessed assets. The speci?c implementation process can refer to the Company's InformationSecurity Risk Management Speci?cation for risk assessment. The inspection assessment is conducted by the DataSecurity Management Committee, which commissions data auditing agencies or external risk assessment serviceproviders to carry out regular and sampling risk assessments. Inspection assessments mainly include, but are notlimited to, the contents of data security risk self-assessment, data security measures, data control and auditingthroughout the data lifecycle, emergency response measures, data integrity, availability, con?dentiality, etc.
Risk assessment and response
Risk monitoring
Third, incidents where external attackers, organizations, or individuals implement cyberattacks through illegalmeans, resulting in data leakage.
First, incidents caused by individuals or organizations disclosing user data or internal corporate data to unauthorizedparties through any means, resulting in data leakage risks or actual leakage events;Second, incidents where individuals or organizations intentionally or unintentionally damage or delete data withinthe system without authorization, affecting normal business operations;and
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
We have established a sound prevention and response mechanism for the aforementioned types of risks.
No administrative penalties due to data security incidentsCompleted
TargetProgress in 2025
6566
During the 2025 Cybersecurity Awareness Week, we launched a themed campaign titled “Welcome to InformationSecurity Online — 2025 Edition.” By creatively integrating e-sports challenges with cybersecurity scenarios, weestablished three themed zones and conducted interactive pop-up activities to promote cybersecurity knowledgeamong employees. This initiative actively supported national cybersecurity awareness efforts and strengthenedorganization-wide security defenses.
Case: Cybersecurity Awareness Week
To help all employees effectively address security challenges in the AI era, we organized a company-wide trainingprogram under the theme “Bridging Knowledge Gaps to Build a Digital Security Fortress.” In addition to trainingsessions, we conducted assessments to reinforce employees’ understanding of information security and enhanceoverall security awareness.
Case: Company-wide Information Security Training
TypeEmergency measuresContainment measuresPost-incident review
We have established a normalized red team/blue team exercise mechanism. Through annual real-world emergencydrills, we continuously strengthen coordinated attack-and-defense capabilities and improve incident responseeffectiveness. These efforts enable ongoing optimization of our monitoring and protection systems, precise identi?-cation of security risks, and overall enhancement of cybersecurity resilience.
We place strong emphasis on fostering a cybersecurity culture. Through regular training programs, emergency drills, andawareness campaigns, we continuously improve employees’ security awareness and defensive capabilities.
Data Security Incident Response Mechanisms
Upon detection of a data breach,the incident must be reportedimmediately to the Data SecurityIncident Response Team, whichcoordinates technical personnel toconduct inspections and preventfurther escalation.
Technical staff promptly investigatesystem, database, and application logsto identify database IPs and affectedbusiness operations. Relevant systemsare taken of?ine or disconnected fromexternal networks as necessary, andevidence is preserved. Law enforce-ment authorities may be involved whenrequired.
The response team organizes acomprehensive review ofsystems and logs, analyzes rootcauses, and documents lessonslearned.Data leakageincidents
In the event of large-scaletampering of core database data,the incident is immediatelyreported to the Data SecurityIncident Response Team. Designat-ed database administrators oroperations personnel verify theissue, initiate the emergency plan,suspend relevant services, andnotify responsible business teams.
Data is restored from backups andservices are resumed. Root causes arepromptly investigated. If the incident isdue to external attacks, the source isanalyzed through logs, and lawenforcement authorities may beengaged if necessary.
Lessons learned are document-ed, root causes analyzed, andsecurity of core databasesystems is further reinforced.
Data tampering
incidents
Upon detection of data loss, theincident is immediately reported tothe Data Security IncidentResponse Team, which coordinatesrelevant departments to assess thescope and business impact.
Technical personnel are mobilized torestore data and services from themost recent valid backups.
Lessons learned are document-ed, root causes are analyzed,and data security handlingmeasures are strengthened.
Data lossincidents
Annual Security Emergency Drill
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
6768
Customer privacy protection is a critical component in safeguarding user rights and interests. We have established a system-atic privacy protection framework through the integrated application of governance mechanisms, technical safeguards, andcompliance testing. During the reporting period, we were not subject to any administrative penalties related to customerprivacy breaches.
We have established a full lifecycle management mechanism for mobile applications. Through structured processes,approval systems, and technical controls, we conduct compliance reviews, record-keeping, traceability, monitoring,and protection across the entire lifecycle of personal information.
Customer Privacy Protection
We closely follow evolving requirements for the protection of minors in cyberspace in the digital era and have formulated adedicated 360 Children’s Personal Information Protection Policy. In addition, dedicated sections on the Protection of Minors’Personal Information are included in both the 360 User Privacy White Paper and the 360 Security Cloud Privacy Policy, clearly de?n-ing rules governing the collection, use, and protection of minors’ information. We apply enhanced standards for minors’ priva-cy protection by standardizing the collection, use, storage, and processing of children’s personal information. We also provideclear and accessible channels for both parents and minors to exercise their rights, including access, correction, deletion, andprotection of personal information. Through these measures, we comprehensively safeguard the lawful rights and interestsof minors.
Protection of Minors' Privacy
We organized dedicated training sessions and assessments onkey data privacy compliance requirements, covering topics suchas core clauses and common pitfalls in drafting privacy policies,compliance requirements across the full lifecycle of app dataprivacy, and identi?cation and mitigation of compliance risksrelated to third-party SDK integration. Through these initiatives,we further strengthened employees’ awareness of data privacyprotection and con?dentiality obligations.
Case: Data Privacy Compliance Training on Key Requirements
Privacy Protection MeasuresMechanisms and technical safeguards
Detection
The 360 Security mobile security team independently developed a compli-ance detection engine to identify compliance risks during the operation ofAndroid applications. The engine features a rich set of compliance detec-tion capabilities aligned with industry standards and regulatory require-ments, including application permission request detection, detection ofapplication violations, third-party SDK compliance detection, and overseasdomain access detection in accordance with the standards set by regula-tory bodies such as the Ministry of Public Security and the MIIT.
Innovation-Driven Development
Focusing on our dual strategic priorities of “AI + Security,” we have established a systematicinnovation and R&D governance framework spanning from top-level strategy and organization-al structure to technology development and commercialization of results. We continuouslyadvance frontier technologies and explore effective pathways to enhance R&D ef?ciency, witha focus on innovation output, talent development, and industry collaboration.Driven by technological R&D, we maintain a high level of investment in innovation. By optimizing talent development mech-anisms, we are committed to building a high-caliber R&D workforce that combines innovative thinking with strong technicalexpertise. In the cybersecurity domain, we have built a strong “white-hat” team that operates at the forefront of globalcyber defense. To date, we have over 2,000 core experts, tens of thousands of contracted community experts, and dozensof city-level service centers across China.
To stimulate innovation potential and foster a dynamic entrepreneurial culture, we have established a comprehensive incentivesystem that combines both ?nancial and non-?nancial rewards. Through dedicated incentive programs, we provide targetedrecognition for projects, teams, and individuals achieving breakthrough results in technological innovation and product devel-opment. Meanwhile, we continuously organize skills competitions and innovation application contests to enhance employees’sense of achievement and recognition, cultivating a culture that values innovation and encourages creativity.
GovernanceFour Corners Analysis of Innovation-Driven Development
Key performance in 2025
Number of R&D
personnel
3,018
R&D personnel as apercentage of our workforce
57.23%3.225 billion yuan
R&D spending
37.11%
R&D spending as a percentageof our operating revenue
Strategy
We continuously innovate byapplying the latest AI and securitytechnologies to align with industrytrends and our own businessdevelopment, ensuring our corecompetitiveness. Leveraging ourself-developed general large model“360 Zhinao” with hundreds ofbillions of parameters, we continu-ously iterate on our underlyingtechnological capabilities. We havereleased the latest model 360zhin-ao3-o1.5, which performedexcellently in third-party benchmarkevaluations. We also launchedAI-native products such as “Nano AISearch” and “360 AI Of?ce,”gradually building an applicationecosystem matrix to acceleratecommercialization.
The arti?cial intelligenceand digital securitysectors we operate in aretechnology-intensive andhigh-tech, characterizedby rapid innovation, fastproduct iteration, highR&D investment, and longmonetization cycles.Failure to keep pace withfrontier technologies anduser needs may lead touser attrition in internetadvertising andvalue-added services.
If we cannot keep up withcutting-edge technologies andaccurately grasp user needs, highupfront R&D investment may nottranslate into sustainable uservalue, undermining the marketfoundation of advertising andvalue-added services, weakeninguser stickiness and market share,and affecting revenue stability.Meanwhile, continuous high-intensi-ty R&D investment may alsoincrease the intensity of resourceconsumption, constrain transforma-tion pace and long-term valuecreation, and create ongoingpressure on long-term value growth.
Marketrisks
High
Short,medium,andlongterm
Risk/Oppor-tunity type
DescriptionFinancial impact
Magn-itude
Impacthorizon
Response measures
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
6970
During the innovation and R&D process, we have established a systematic risk management mechanism, integrating riskidenti?cation, assessment, and mitigation measures into the project initiation phase to ensure risk prevention and controlthroughout the entire R&D cycle.
Impact, Risk and Opportunity Management
Indicators and Targets
Technological Innovation Initiatives
We leverage proprietarylarge models to drive productupgrades and enhance userexperience and commercial-ization capabilities. AI isapplied to optimize precisionadvertising and traf?cconversion, improvingend-to-end ad managementand mitigating the impact ofPC market decline.In digital security services,we integrate large modeland digital capabilities todrive businessbreakthroughs.
With the shift to mobileinternet, users and advertis-ers have migrated to mobileplatforms, impacting thetraditional PC advertisingmarket, and we face the riskof declining revenue scale.Meanwhile, in the “AI Plus”wave, intensi?ed competitionincreases expansion costs. Ifwe did not respond in atimely manner, it wouldaffect our commercializationef?ciency and competitiveadvantage.In the digital security market,although we possessnational-level cybersecuritycapabilities, heterogeneousclient demands limitmonetization of ourtechnological advantages.
Failure to adapt to mobile migrationmay erode the foundation of ourtraditional businesses and hinderresource reallocation toward growthareas. Increased competition andhigher entry barriers in new AI-drivenmarkets raise requirements forcommercialization ef?ciency andresponsiveness, affecting long-termcompetitiveness and business modelsustainability. In the “AI Plus” wave,increased competition and higher entrybarriers in new AI-driven markets raiserequirements for commercializationef?ciency and responsiveness, affectinglong-term competitiveness andbusiness model sustainability.The room for value realization becomesconstrained, the pace of new businessexpansion and market penetrationcapabilities are put to the test,affecting the sustainability of ourbusiness model and the optimizationprocess of our business structure.
Loss of core technologies or keypersonnel may weaken sustainedtechnological barriers, reduce ef?ciencyin converting R&D investment intoinnovation outcomes, and constrainproduct development and marketresponsiveness, placing sustainedpressure on long-term value creation.
Tech-nology
risks
Medium
Mid- to
long-term
We continuously strengthenIP management systems,enhance con?dentialitymechanisms for coretechnologies, and establishcompetitive incentivestructures and talentdevelopment environmentsto stabilize core teams andensure sustained innovationcapability.
In the ?elds of AI and cyberse-curity, technical patents,intellectual property, and R&Dachievements are importantintangible assets for theCompany. Risks such as a leakof core technology informationor negligence in patentmanagement may lead to theleakage of core technology,adversely affecting ourtechnological innovation andnew product development.Our core technologicalfoundation stems from thecontinuous innovation of ourtechnical personnel, and it isnormal for R&D personnel to berenewed and iterated over time.However, if situations such asthe loss of core technicalpersonnel or the leakage of coretechnologies occur, it will havea material adverse impact onour production and operations.
Opera-
tional
risks
High
Mid- to
long-term
Our “AI + Security” dualstrategy aligns closely withnational policy direction. Weactively participate inindustry standard-setting tostrengthen our in?uence inAI security.National policies are promotingthe digital economy andcybersecurity, with AI securityrisks elevated to a strategiclevel.
The rise of AI security risks to thenational strategic level, coupled withpolicy dividends, has created moremarket opportunities for the applicationof security technologies, acceleratedthe penetration of core technologiesinto key industries, deepened theintegration of security services withintelligent scenarios, strengthened thestrategic value of core businesses amidthe wave of the digital economy, andinjected strong momentum intolong-term value growth.
Policyopportu-
nities
Medium
Long-term
Prior to project initiation, R&D project leaders conduct systematic identi?cation and assessment of potential risks. Based onthe level of impact, risks are categorized into high, medium, and low levels, with corresponding mitigation plans developedaccordingly.
Risk identi?cation and assessment
The risk assessment results and mitigation measures are submitted as core components of the project proposal to theTechnology Committee, serving as key references for project evaluation and decision-making.
Risk review
To foster a strong culture of innovation and continuously enhancethe professional capabilities of employees, particularly those inR&D roles, we regularly organize “Tech Talk” knowledge-sharingsessions, providing a platform for technical exchange and learn-ing. During the reporting period, we actively conducted Tech Talksessions covering a wide range of disciplines, including front-enddevelopment, back-end development, algorithms, cybersecurityresearch, testing, big data, and AI applications. These initiativeshave effectively promoted knowledge sharing, strengthenedtechnical collaboration, and cultivated a positive and innova-tion-driven organizational culture.
After project approval, all subsequent R&D activities and risk management measures strictly adhere to the risk preventionrequirements speci?ed in the approval report, achieving effective integration of risk management and project execution.
Risk monitoring and prevention
CompletedAnnual R&D investment ratio not less than 30%CompletedR&D personnel ratio not less than 50%
Innovation and Technology Sharing
Risk/Oppor-tunity type
DescriptionFinancial impact
Magn-
itude
Impacthorizon
Response measures
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
TargetProgress in 2025
7172
We conducted a dedicated university–enterprisecollaboration visit with the Asian College andAfrican College of Beijing Foreign Studies Universi-ty. Both parties engaged in in-depth discussions onkey topics such as the development of AI largemodels for less commonly taught languages andcollaborative research projects, exploring innova-tive pathways for future cooperation.
Case:
Industry exchange serves as a critical engine for corporate growth and technological advancement. In 2025, we leveragedour innovation strengths to further deepen industry-wide technical exchange and ecosystem collaboration. We activelyfostered an open, mutually bene?cial exchange ecosystem by sharing best practices, jointly exploring frontier developments,and participating extensively in both domestic and international forums on innovation and knowledge sharing, therebycontributing to coordinated industry development.
Industry Exchanges
We continue to deepen Industry-Academia-Research (IAR) cooperation, maintaining close collaboration with universities,research institutions, and other third-party platforms, continuously strengthening technological innovation capabilities tosupport high-quality industrial development. As of now, 360 has taken the lead in establishing industry-academiaintegration alliances, including the National Information Security Industry-Academia Integration Community, the NationalArti?cial Intelligence + Security Industry-Academia Integration Community, the Beijing New Generation InformationTechnology Industry-Academia Joint Community, the National Smart Security Industry-Academia Integration Community,and the Hebei Province Digital Security and Arti?cial Intelligence Industry-Academia Integration Community, gatheringentities from government, enterprises, institutions, and universities to jointly promote the development of the indus-try-academia integration ecosystem and talent cultivation.
Industry-Academia-Research Cooperation
We hosted the Frontier AI Model Forum at the 2025 World Internet Conference, bringing together leading globalexperts, scholars, and industry leaders. The forum focused on three core themes: AI model security governance,technology ecosystems, and industrial applications. Participants engaged in in-depth discussions on AI iteration,risk mitigation, ecosystem collaboration, and industrial enablement. They shared innovative solutions and practi-cal achievements including the “model-controlling-model” security paradigm, hardware-software co-optimiza-tion, and the industrial deployment of Agentic AI, while conducting in-depth discussions on pathways for AIsecurity, innovation, and sustainable development. The forum attracted broad participation from government,industry, and academia, establishing a high-level platform for global AI exchange and cooperation.
Case:
We hosted the “Nano AI Campus Tour” at Henan Vocational College ofLogistics. The event focused on two core areas: “Digital Security and AITechnology Lectures” and “Nano AI Video Creation Competition Call forWorks,” aiming to help students deepen their understanding of bothdigital security and AI, promote the precise alignment of classroom knowl-edge with industry needs, and reserve professional talent for the develop-ment of the digital economy in Henan Province.
Case:
The 2025 Annual Conference of the National AI + Security (Digital Secu-rity) Industry–Education Integration Consortium was held under thetheme “Cross-Sector Synergy · Connecting the Future — Building aNew AI Security Ecosystem and Cultivating Industry–Education Talent.”In collaboration with Lanzhou University and Jiuquan Vocational andTechnical University, we brought together stakeholders from govern-ment, academia, enterprises, and research institutions. Guided byindustry demand and focused on talent development, the conferencepromoted deeper integration between arti?cial intelligence and digitalsecurity across the education and industrial landscape.
Case:
To further promote research on security technology and standardization develop-ment for large models in the cloud, the CAICT took the lead in establishing the CloudLarge Model Security Promotion Alliance in March 2025, aiming to integrate indus-try resources, standardize the security development of large models in the cloud,and promote the coordinated development of technological innovation and securitygovernance. At the 2025 Global Digital Economy Conference, 360 Security wasawarded a medal as one of the inaugural member organizations of this initiative.
Case:
To promote the application of intelligent capabilities in the ?eld of software engineering, 360 Security collaborat-ed with over twenty leading companies in the industry to jointly compile the Measurement Speci?cation for Intelli-gent R&D Application E?ciency of Software, helping to establish a uni?ed measurement standard for intelligentsoftware R&D ef?ciency in the industry, ensuring comparability of data among different enterprises.
Case:
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
7374
We have established a new “A·I·P·C”intelligent marketing framework andlaunched a one-stop intelligent advertis-ing delivery platform centered on coreproducts such as 360 Lingshu, 360Chuangyi, 360 Agent, and 360 Zhito.Leveraging the integration advantages ofour self-developed 360 Zhinao with severalmainstream large models, we continuouslyiterate our entire line of internet products,such as 360 AI Of?ce, Nano AI, Nano ComicDrama Pipeline, and 360 Security Lobster.
Technological Innovation Achievements
We actively lead and participate in the formulation and revision ofinternational, national, and industry standards, contributing to theoverall advancement of industry development and product qualitywhile demonstrating leadership within the sector. During the report-ing period, we were deeply involved in the development of threenational standards: GB/T 45288.1-2025 Arti?cial Intelligence—LargeModels—Part 1: General Requirements, GB/T 45288.2-2025 Arti?cialIntelligence—Large Models—Part 2: Evaluation Metrics and Methods, andGB/T 45288.3-2025 Arti?cial Intelligence—Large Models—Part 3: ServiceCapability Maturity Assessment. We also of?cially released the AgentEngineer Standard and Certi?cation System, and the White Paper onLarge Model Security.In addition, research from the 360 Vulnerability Research Institute, titled “WingMuzz: Blackbox Testing of IoT Protocols viaTwo-dimensional Fuzzing Schedule,” received the Distinguished Paper Award at the 40th IEEE/ACM International Conferenceon Automated Software Engineering. Two research papers from the 360 AI Research Institute, focusing on multimodal gener-ation and multimodal understanding, were accepted at ICCV 2025 (International Conference on Computer Vision).
To enhance the capabilities of large model application delivery vendors in technology, management, and services,on June 24, the technical speci?cation General Capability Requirements for Large Model Application DeliveryVendors (AIIA/T 0225-2025), led by the CAICT and participated by 360 Security and other enterprises, was of?cial-ly released.
Case:
Business segmentInnovative achievements
Internet services
360 AI Marketing Illustration
360 AI Of?ce Interface
Our Strategic Product 360 Security Cloud
We continuously promoted the dual advancement of technological innovation andcommercialization of the 360 Security Large Model, enhancing the model's practicalcapabilities and accelerating the deployment of applications for industry clients, there-by consolidating our leading position in the ?eld of AI security integration.
Business segmentInnovative achievements
Digital security
360 Security Cloud Services
360 Security Large Model PlatformBased on “model-to-model governance,” we have developed the Large ModelSafeguard, which provides enterprises and institutions with one-stop capabilities,including model access, data management, security evaluation, task management,and result analysis, helping identify, quantify, and mitigate security risks associatedwith large model applications.
Content Security Assessment and Content Security Guardrails, 360
Safeguard’s Two Major Modules
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
7576
During the reporting period, we received the following major recognition and awards:
We ranked No. 1 on the Top 20 Cybersecurity Companies in China (2025) released by the Internet Society of China.
Technology Innovation Awards
Intellectual Property Protection
360 Dash Cam G980
360 Security Operation AgentBuilding on the 360 Security Large Model, we alsoinnovatively launched the Security Agent Swarm.
Empowering the entire hardware portfolio with AItechnology, we continuously strengthen our indus-try-leading position in core categories such asvideo doorbells and dash cams through upgradesin both functionality and experience.
Business segmentInnovative achievements
Digital security
Smart hardware
We were listed on the Annual Enterprise List of the “AI Product Rankings” in the 2025 China AI Annual Rankings.
The 360 Security Large Model was selected as a typical case in the World Internet Conference Report EmpoweringGlobal Sustainable Development through Inclusive and Equitable AI Governance.
Nano AI was included in the Annual Product List of the “AI Product Rankings” in the 2025 China AI Annual Rankings.
The 360 Large Model Safeguard became the ?rst to pass CAICT’s Large Model Security Protection Guardrail Capabil-ity Evaluation and obtain certi?cation.
The 360 Large Model Safeguard ranked No. 1 in overall capability in IDC’s report Technical Assessment of Large ModelSecurity Evaluation Platform Vendors in China, 2025.
The 360 Security Large Model All-in-One Appliance received the Top Recommendation in IDC’s report China SecurityLarge Model All-in-One Market Insights and Vendor Recommendations, 2025: Large Models Sweeping the Globe, with AI andSecurity Reinforcing Each Other.The 360 Security Large Model was ranked No. 1 in multiple subsegments in IDC’s report China Large Model SecurityProtection Market Overview, 2025: Building Trustworthy AI through Comprehensive Detection and Protection
The 360 Large Model Safeguard Evaluation System obtained the Large Model Security Evaluation System (EnhancedLevel) Certi?cation from the National Network and Information System Security Product Quality Inspection andTesting Center
The 360 Security Large Model was awarded the following certi?cations by the China Academy of Information andCommunications Technology (CAICT): Intelligent Threat Detection Capability Certi?cation, Intelligent Security Opera-tions Capability Certi?cation, and Intelligent Knowledge Q&A Capability Certi?cation .
The 360 Endpoint Security Agent was selected for inclusion in the 9th Annual Case Compendium of the Software andInformation Service Industry published by the Internet Society of China.
The 360 Large Model Security Solution was recommended in IDC’s report Large Model Security Detection and ProtectionSolutions: Vendor Recommendations and Insights.
The 360 Security Agent received authoritative certi?cations across ?ve core domains, namely security operations,security detection, data security, security compliance, and attack-and-defense intelligence, in IDC’s report ChinaSecurity Agent Market Overview, 2025: The Momentum Is Here, the Future Is Promising.
Government and ?nancial industry solutions built on the 360 Security Agent were recognized as “OutstandingSolutions for Key Cybersecurity Industries in China (2025)” by RoarTalk Cybersecurity Research Institute.
As a technology-driven enterprise, we regard intellectual property (IP) as acore strategic asset and have established a systematic IP protectionsystem. By strengthening institutional mechanisms and setting up aPatent Review Committee, we continue to standardize the creation,utilization, protection, and management of IP, providing robust support fortechnological innovation and commercialization. During the reportingperiod, one of our subsidiaries was successfully selected as a candidatefor the National Intellectual Property Demonstration Enterprise Program.
We have formulated a series of policies and guidelines, including the Intellectual Property Management Measures, thePatent Application Management Measures, the Patent Classi?cation Management Measures, the Patent Drafting andResponse Procedures, and the Legal Compliance Guidelines for Open-Source Software.In this ?scal year, building on our existing governance framework for patents, trademarks, copyrights and other IPs, wedeveloped the 360 Group Trade Secrets Management Measures, prioritizing trade secret protection. Through six keydimensions, namely systematic assessment, institutional design, organizational implementation, tool support, capabilitybuilding, and external collaboration, we have established a closed-loop governance system that is actionable, auditable,and continuously improvable. This has enabled the formation of an integrated “four-in-one” IP system encompassingpatents, trademarks, copyrights, and trade secrets, laying a solid institutional foundation for long-term IP protection.
Intellectual Property System Development
Institutional guarantee
We have established a Patent Review Committee, chaired by the Vice President and Chief Scientist of the Company, withmembers comprising technical experts nominated by various professional committees across different ?elds.
Management organization
The 360 Security Agent was also recommended in IDC’s report China Agent Market Analysis and Vendor Recommenda-tions, 1Q25.
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
7778
Intellectual Property Protection Measures
We have implemented full lifecycle patent management, featuring online application review, standardized procedures,and authoritative evaluation criteria. Through multidimensional pre-assessment of patent proposals, covering technical,commercial, and legal value, we classify and manage innovations best suited for patent protection, thereby strengthen-ing and expanding our patent portfolio.We have established a “full-chain proactive rights protection mecha-nism” covering monitoring, evidence collection, litigation, and enforce-ment. This mechanism enables professional identi?cation and ef?cienthandling of infringement cases. Supported by a regular monitoringsystem, potential infringements are promptly identi?ed, followed bystandardized evidence preservation and legal assessment, and system-atically advanced through judicial proceedings and enforcement,forming a sustainable and institutionalized IP rights protection capability.We have introduced the Management Guidelines for External InformationRelease via New Media Accounts and O?cial Websites, clarifying responsibili-ties, setting standards, and optimizing processes to govern contentacross all corporate media channels. During the reporting period, weconducted multiple training sessions and optimized approval work?owsto strengthen ex-ante risk control in content production, effectivelyreducing compliance violations and infringement incidents.
Protecting proprietary IP rights
We fully respect third-party IP rights and enhance employee awareness through institutional frameworks and processcontrols. In addition, we have also established IP risk early warning and control mechanisms, embedding IP risk manage-ment checkpoints into key stages such as product initiation, launch, and phase-out, thereby effectively preventinginfringement risks in our operations and R&D activities.In the event of infringement claims, we implement a timely and effective complaint handling mechanism. Based ondifferent product types and IP categories, we have developed tailored handling guidelines to standardize case process-ing. We review the legitimacy and relevance of IP claims, safeguard the legitimate rights and interests of rights holders.We take measures such as noti?cation, deletion, blocking, or severing links against infringing content and promptlyprovide feedback on the handling results to the rights holders.
Respect for others' IP rights
In response to the intellectual property risks associated with AI products, we conduct in-depth research on cutting-edgelegal issues and keep pace with industry developments. By internalizing external regulatory requirements, we haveestablished a risk checklist and compliance guidelines. We formulated and published the AIGC Intellectual PropertyCompliance Guidelines, covering areas such as training data compliance and generated content compliance, providingstrong IP compliance support for our cutting-edge business development.
AI IP compliance
During the 2025 National Cybersecurity Awareness Week, we joined four other founding organizations to launch theCybersecurity Industry Patent Pool. This initiative aims to promote collaborative innovation through centralized patentmanagement under the principles of “shared patents, co-developed ecosystem, and jointly strengthened security.” Themechanism is expected to reduce technology transaction and enforcement costs, enhance industry-wide innovationsynergy and risk response capabilities, and inject new momentum into high-quality industry development.
Advancing the cybersecurity industry patent pool
To enhance employees' awareness of IP risks, we organize IP-related training and have established patent displaywalls to showcase core technological achievements.IP awareness cultivation
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
7980
Ethics in Science and Technology
The rapid advancement of AI large models is driving industrial transformation whilealso introducing new challenges in ethical governance. As a developer of AI technolo-gies, we consistently uphold the principle of “technology for good” and have systemati-cally established AI ethics guidelines. By integrating technological innovation withinstitutional governance, we ensure that our technology development remains funda-mentally oriented toward enhancing human well-being. We have obtained the ISO/IEC42001 Arti?cial Intelligence Management System Certi?cation, making us the ?rstcybersecurity company in China to achieve this certi?cation.
Win-Win Cooperation
At 360 Security, we continuously strengthen our supplier management system in accor-dance with the 360 Group Management Measures for Centralized Procurement Depart-ment Supplier. We standardize the full lifecycle of supplier management, includingonboarding, quali?cation, maintenance, evaluation, and exit, while establishing anddynamically maintaining a high-quality supplier pool. This approach ensures both procure-ment quality and ef?ciency, while optimizing cost-effectiveness.
At the beginning of the year, we launched the DS large model safety solution, covering the entireprocess of model training, inference, and operation. With the concept of “model-to-model gover-nance,” we safeguard large model safety. To prevent large models from falling into the trap ofhallucinations, 360 Smart Search reduces false or inaccurate information through precise knowl-edge integration, enhancing the credibility and reliability of large models and effectively reducingthe likelihood of generating hallucinated content. At the same time, 360 Smart Search supportsknowledge extraction and summarization based on enterprise private-domain data, providingsafer and more ef?cient business support for companies.At the World Internet Conference Wuzhen Summit, 360 Security of?cially released the WhitePaper on Large Model Security, systematically explaining the ?ve key risks associated with theoperation of large models for the ?rst time: infrastructure security risks (e.g., device control,supply chain vulnerabilities, denial-of-service attacks, and misuse of computing resources),content security risks (e.g., non-compliance with core values, false or illegal content, large modelhallucinations, and prompt injection attacks); data and knowledge base security risks (e.g., dataleakage, unauthorized access, privacy misuse, and IP-related risks); agent security risks (e.g.,unclear security boundaries in plugin invocation, computing resource scheduling, and data ?ows);and user-side security risks (e.g., permission control, API monitoring, and malicious script execu-tion). Based on practical experience, the white paper proposes a dual-track governance strategyof “plug-in security + platform-native security” to promote the stable development of the AIindustry towards being “secure, benevolent, trustworthy, and controllable.”To enhance employees' technological ethics literacy, we have systematically developed a technology ethics curriculum andtraining system, and conducted specialized training for technical and business personnel covering modules such as ethicalprinciples, privacy protection, fairness, and transparency. Additionally, we regularly invite industry experts and scholars toshare cutting-edge research ?ndings and viewpoints, deepening employees' understanding of science and technology ethicsthrough discussions. We encourage employees to participate in AI ethics research projects, support in-depth exploration ofethical frontier issues, and apply research outcomes to product development practices. We insist on advancing productresearch and development and the application of AI technology with a responsible attitude, ensuring that technology trulyserves human well-being.
We strictly comply with applicable laws and regulations, including the Law of thePeople’s Republic of China on Progress of Science and Technology, the Opinions onStrengthening the Governance of Science and Technology Ethics, and the Measures forScience and Technology Ethics Reviews (Trial). We systematically advance large modelsecurity governance, AI content safety management, and industry standard develop-ment, embedding technology ethics throughout the entire lifecycle of R&D and productoperations. During the reporting period, we did not engage in any actions that violatedscienti?c ethics.
Supplier Management
Registered suppliers: Suppliers that have submitted basic information via the 360 Group SRM system portal andare pending review.Quali?ed suppliers: Suppliers whose certi?cations and supporting documentation meet requirements and havecompleted category classi?cation.Reserve suppliers: Suppliers that have passed credit checks and completed supplier communication, on-siteinspections (if applicable), and material certi?cation (if applicable), and have passed reserve evaluation.Cooperative suppliers: Suppliers that have won procurement bids, provided products or services, and signedcooperation agreements or purchase orders, including both ongoing and completed collaborations.Suspended suppliers: Suppliers with performance issues during cooperation and unsatisfactory recti?cationoutcomes, temporarily restricted from participation until improvements are made.Blacklisted suppliers: Suppliers involved in fraudulent activities or serious misconduct, permanently disquali?edfrom future cooperation.
Supplier classi?cation:
Suppliers are onboarded through a structured process including information submission, admission review, andreserve evaluation.Key suppliers are subject to on-site inspections based on the Supplier Assessment Form to comprehensivelyevaluate their capabilities.Suppliers are required to sign the Integrity Commitment Letter and the Con?dentiality Commitment Letter, strict-ly complying with our anti-fraud policies.
Supplier admission review:
We conduct quarterly evaluations across dimensions such as pricing, quality, service, responsiveness, and quali?-cations, and assign annual supplier ratings, and comprehensively assess the annual rating of suppliers each year.Suppliers with substandard performance are subject to corrective actions or formal reviews, with continuoustracking of improvement outcomes.
Supplier performance evaluation:
Misconduct can be reported through established whistleblowing channels.Suppliers found in violation of regulations are subject to penalties, including suspension or blacklisting.Supplier oversight and elimination:
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
8182
Supply Chain Security
We have established the 360 Group Supply Chain Security Management Policy and acomprehensive emergency response framework for supply chain securityincidents, enhancing our capability to effectively respond to unexpected disrup-tions. The framework comprises six core components: risk identi?cation, riskanalysis, risk evaluation, risk treatment, risk monitoring and review, and riskcommunication and documentation.
Industrial Chain CollaborationWe leverage our comprehensive capabilities to strengthen collaboration withsuppliers and partners across project cooperation, technical support, resourcesharing, etc. Through these efforts, we jointly promote green transition andsustainable development across the industrial chain.
A risk treatment plan should be developed for the speci?c risks identi?ed in the risk assessment, and risk treatmentstrategies should be selected in conjunction with the organization's business requirements and capacity constraints.Key strategies mainly include:
Asset identi?cation: Identify the key assets in the supply chain, as these assets have a direct impact on theorganization's business functions. Any disruption or damage to these assets may result in product or servicefailure or quality degradation.Threat identi?cation:
a) Threat source identi?cation: Supply chain security threats mainly arise from environmental factors, supplychain attacks, and human errors.b) Threat type identi?cation: Typical supply chain security threats mainly include malicious tampering, counter-feiting, supply disruptions, information leakage, regulatory violations, and other threats.Vulnerability identi?cation: Supply chain vulnerabilities are defects that can be exploited by threats at anystage of the supply chain, including design, development, production, integration, warehousing, delivery, opera-tion and maintenance, and disposal of products and services.Existing security measures identi?cation: Identify the existing or planned security measures in the supplychain and con?rm the effectiveness of these measures.
Risk identi?cation:
Risk mitigation: Actions taken to reduce the likelihood of risk occurrence or mitigate the negative consequences
of risk. That is, implement control measures to reduce the likelihood and impact of threats, thereby lowering therisk level, so that after reassessment, the residual risk can be accepted by the organization's risk strategy.Risk avoidance: A decision not to enter a risk scenario or an action to withdraw from a risk scenario. This is
achieved by choosing to abandon certain businesses or assets that may trigger risks, adopting environmentalchanges, or canceling risk-related activities.
Risk transfer: Sharing with another party the losses or bene?ts arising from a risk. That is, transferring all or part
of the risk to other parties. The organization may transfer risks by purchasing insurance or sharing them withpartners.Risk retention: Accepting the losses or bene?ts from a speci?c risk. When the organization's security policypermits, no control measures are taken for the risk, and the potential losses from the speci?c risk are accepted.If the risk reduction strategy is selected, appropriate supply chain security risk control measures must be chosenfor the risk to ensure that, after implementation of the control measures, the residual risk is acceptable to theorganization.
Risk treatment:
The purpose of risk monitoring and review is to ensure that the organization's risks remain within acceptable limits.Supply chain risks are dynamic, as threats, vulnerabilities, risk likelihood, risk impact, etc. may all change as theCompany's business evolves. A risk monitoring and review plan should be established to monitor risk managementactivities, periodically review control measures, and adjust scope boundaries in a timely manner.
Risk monitoring and inspection:
Risk communication and documentation are activities through which risk managers and stakeholders reach agree-ment on how to manage risks by exchanging and/or sharing relevant risk information.Risk communication and documentation:
The likelihood analysis should be conducted from two perspectives: ?rst, the likelihood of damage to the supplychain, such as potential impacts on the use of critical components or an increased risk of IP theft; second, thelikelihood of damage to products, services, systems, or components within the supply chain, such as systemsbeing implanted with malicious code or components being damaged by electrical surges.The consequence analysis focuses on identi?ed supply chain security incidents and analyzes their potentialimpacts. Consequence analysis is conducted based on factors such as the importance of assets, characteristicsof the threat sources that triggered the security incidents, identi?ed vulnerabilities, and the organization's sensi-tivity to incidents as re?ected by existing or planned security measures.Risk estimation involves assigning values to the likelihood and consequences of supply chain security risks, andshould be based on the conclusions drawn from the likelihood and consequence analyses.
Risk analysis:
includes likelihood analysis, consequence analysis, and risk estimation.
Risk assessment compares the results of risk estimation with risk assessment criteria and risk acceptance criteria,producing a prioritized list of risks based on the risk assessment criteria. The consequences and likelihood obtainedfrom risk identi?cation and analysis can also be used for risk assessment activities.
Risk assessment:
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
8384
Equal Treatment to SMEsWith the principles of fairness and equity in all partnerships ?rmly inmind, we treat all partners, including small and medium-sized enterpris-es (SMEs), on an equal basis. We ensure timely payment to SME suppli-ers. As of the end of the reporting period, no overdue payments to SMEsuppliers were recorded.We also actively engage in digital poverty alleviation initiatives. Lever-aging big data technologies, we have developed the “Digital SecurityChina” solution that transforms the traditional cybersecurity businessmodel into a Security-as-a-Service (SECaaS) model. Through our 10billion yuan subsidy program, we have made security products andservices, serving 1.5 billion users globally and available free of charge toSMEs and micro-enterprises.
As a strategic partner of HarmonyOS, 360 Group was invited to participate in the HarmonyOS Starlight GalaEcological Forum. We contributed to discussions on multi-device and multi-scenario security, including applicationsecurity, data security, and privacy protection. We also supported the ecosystem through open-source securitygovernance, offensive and defensive security practices, and vulnerability discovery, enhancing the overall securi-ty of the HarmonyOS ecosystem.
Case:
Rural Revitalization
We actively respond to China’s rural revitalization strategy, focusing on industrial develop-ment, education, ecological sustainability, and cultural advancement. Through industrialcollaboration and educational support initiatives, we deliver targeted assistance acrossmultiple regions, injecting sustained momentum into rural development and contributing tothe goals of a strong agriculture, a beautiful and revitalized countryside, and prosperousfarmers. In doing so, we actively ful?ll our corporate social responsibility.During the reporting period, we invested approximately400,000 yuan in rural revitalization.
The “Breaking Security, Breaking Through the Ecosystem” 360 digital security ecosystem partner conference wassuccessfully held at ISC.AI 2025. The conference gathered over a hundred partners from across the country, andwe engaged in in-depth discussions with partners about new opportunities, technologies, and achievements in thedigital security industry in the AI era, envisioning the future development of the digital security ecosystem.
Case:
In 2025, we continued to focus on educational equity, striving to improve the conditions of schools in relatively under-developed areas. We provided special funds for updating desks and chairs and enhancing the learning environmentat schools in Zhangbei County, Zhangjiakou City, Hebei Province; for purchasing teaching equipment and ensuringteaching conditions at Chenglong School in Longnan City, Ganzhou, Jiangxi Province; and for funding students inneed at Jiu San Middle School in Weining, Bijie, Guizhou, and supplementing necessary teaching materials.
Case:
A subsidiary of 360 Security receivedrecognition as an OutstandingCase of Social Responsibilityamong Private Enterprises in China
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
8586
Supporting the National Cybersecurity Strategy
Corporate Responsibility
Social ContributionWe integrate the ful?llment of social responsibility into our corporate devel-opment strategy. Guided by our commitment to serving national prioritiesand strengthening our development foundation, we proactively align withmajor national strategies and actively contribute to key areas such as coordi-nated regional development and community co-building.
Community Engagement
We attach great importance to building harmonious relationships with the communities in which we operate. We have estab-lished ef?cient communication mechanisms, actively respond to community needs, and participate in community activities,fostering mutual growth and coordinated development between the Company and local communities.
We fully leverage our role as a key force in national cybersecurity defense. With our internet-wide security big data and ourself-developed security large model, we continuously conduct attribution and countermeasures against overseas cyberat-tacks. In 2025, we successfully traced 270,000 overseas cyberattacks targeting the Asian Winter Games Harbin, identifyingfor the ?rst time three agents of the U.S. National Security Agency and two U.S. universities. We also assisted public securityauthorities in identifying hacker organizations in Taiwan and exposing their attacks on critical systems in key sectors such asenergy and transportation. To date, we have identi?ed and named 60 overseas APT groups, accounting for 98% of the totaldiscovered in China.
Public WelfareWe leverage our technological expertise to ful?ll our social responsibilities, empowering rural communities through technolo-gy donations and safeguarding public well-being through inclusive services. By extending the bene?ts of digital security to abroader population, we demonstrate our commitment as a responsible corporate citizen through concrete and impactfulactions.We regard emergency relief as a key component of our corporate social responsibility. Through the 360 Foundation, wemade donations to support earthquake-affected communities in Shigatse, Tibet, and ?ood-affected residents in HuairouDistrict, Beijing, helping them restore normal production and daily life.Tax ComplianceWe strictly comply with the Enterprise Income Tax Law of the People’s Republic of China and uphold the rule of law and compli-ance as fundamental principles. We regard lawful and good-faith tax payment as a core responsibility of a corporate citizen.We continuously improve our tax management system to ensure that all taxes and fees are declared and paid in full and ontime. Through standardized and ef?cient tax management, we provide strong support to national ?scal revenues andcontribute to the improvement of public services and equitable allocation of social resources. In 2025, we paid a total of 506million yuan in taxes and fees.
To further promote the Regulations on the Protection of Minors in Cyberspace and enhance minors’ awareness ofcybersecurity and self-protection, our exhibition center welcomed many young visitors. Through immersive expe-riences and interactive teaching, participants quickly developed a foundational understanding of cybersecurity.
Case:
In May 2025, 360 (Yangzhou) Digital Technology Co., Ltd. co-organized athemed quiz event in Jiangwang Community titled “Enhancing Awarenessand Building Cybersecurity Together.” The event was organized in engag-ing and educational formats to disseminate key provisions of laws such asthe Cybersecurity Law and the Personal Information Protection Law.
Case:
In 2025, with the coordination and support of the Ministry of Foreign Affairs, wedonated electric tricycles adapted for mountainous terrain to Jinping County,Yunnan Province. This project addressed long-standing challenges in agricultur-al transportation, given that 99.72% of Jinping County is mountainous, resultingin high costs and low ef?ciency for logistics.The vehicles are now directly used for transporting local specialty agriculturalproducts such as tea, tropical fruits, and fresh corn, facilitating access fromrural areas to urban markets.
Case:
In June 2025, the CPC 360 Group Committee, in collab-oration with the Aixing Dream Public Welfare ServiceCenter, launched a charitable initiative themed “Con-necting Hearts, Warming ‘Starry’ Journeys.” Through a“purchase-as-donation” model, we procured a batchof creative cultural products handcrafted by youngpeople with special needs, supporting their develop-ment and social inclusion.
Case:
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
GovernanceCORPORATE GOVERNANCE SYSTEMREMUNERATION MANAGEMENTPARTY BUILDING LEADERSHIPANTI-BRIBERY AND ANTI-CORRUPTIONFIGHT AGAINST UNFAIR COMPETITION
8990
Performance of Independent Directors During the Reporting Period
GovernanceFour Corners Analysis of Corporate Governance
Corporate Governance Mechanism
We strictly comply with the Company Law of the People’s Republic of China, the Securities Law of the People’s Republic of China, theCode of Corporate Governance for Listed Companies in China, and the Rules Governing the Listing of Stocks on Shanghai StockExchange, and continuously re?ne our internal governance mechanisms. We have further optimized our governance struc-ture, including the Board of Shareholders, the Board of Directors, and the Audit Committee.We have established a governance structure characterized by mutual checks and balances, clearly de?ning the boundariesof authority and responsibilities among the Board of Shareholders, the Board of Directors, and management. This frame-work ensures scienti?c decision-making, effective execution, and robust oversight, thereby preventing the abuse of powerand safeguarding the interests of all stakeholders.
The Board of Shareholders, as the highest power authority of the Company, is composed of all sharehold-ers and has the decision-making authority over the Company's operational policies and investment plans.We strictly follow statutory procedures for convening and conducting general meetings and regularly holdannual and extraordinary general meetings to ensure that shareholders’ rights to information, participa-tion, and voting are fully protected.
Board ofShareh-olders
Board ofDirectors
Board ofDirectors
The Board of Directors is elected by the Board of Shareholders and is accountable to it, serving as the coredecision-making body for the Company's operations and development, formulating strategies and policies.The Board of Directors has three specialized committees: the Audit Committee, the Nomination andCompensation Committee, and the Strategy Committee. Each specialized committee strictly follows itsdivision of responsibilities to conduct in-depth research and prudent deliberation on relevant matters,providing solid support for the Board of Directors' scienti?c decision-making.
The Board of Directors consists of 5 directors (including independent directors), with 1 chairman and 3independent directors. In August 2025, the Board of Directors deliberated and approved the proposal toabolish the Supervisory Board and amend the Articles of Association and related policies. The functions ofthe former Supervisory Board have been assumed by the Audit Committee. This restructuring streamlinedgovernance layers, strengthened oversight functions, and enhanced both decision-making ef?ciency andsupervisory effectiveness.
We continue to advance board diversity by incorporating factors such as gender, age, educationalbackground, professional expertise, and work experience into the director nomination process. Currently,board members possess expertise across ?nance, management, accounting, and law, forming a well-struc-tured and complementary governance team. Leveraging their unique cultural perspectives, professionalexpertise, and practical experience, the directors fully express their views in decision-making, achievingcoordination, cooperation, and effective checks and balances, thereby collectively stimulating the Board'sinnovative vitality and governance effectiveness.
The Audit Committee has effectively assumed the responsibilities previously held by the SupervisoryBoard and ful?lls its oversight duties diligently. Through continuous review of ?nancial statements,related-party transactions, internal controls, and the performance of directors and senior management,we strengthen ongoing and post-event supervision, improve risk control mechanisms, and continuouslyenhance corporate governance and compliance management, thereby ensuring stable operations.
AuditCommittee
Manage-ment
Our management team is responsible for day-to-day operations within the authority delegated by theBoard. The management team includes the General Manager, the Board Secretary, and the Chief Finan-cial Of?cer, all of whom are appointed and removed by the Board. All senior management membersdiligently ful?ll their ?duciary duties and faithfully implement Board resolutions, driving standardizedoperations and sustainable development.Board Effectiveness Evaluation
We place great importance on the key role of independent directors in corporate governance, fully leverag-ing their professional advantages to continuously enhance governance effectiveness. During the reportingperiod, all independent directors attended all board meetings, either in person or via telecommunication,and exercised independent judgment in reviewing proposals. Their professional insights, informed byindustry trends and Company operations, provided strong support for sound decision-making.
Board Independence and Diversity
Board ofDirectors
5 directors
1 chairman
3 independent directors
Number of independent directorsas a proportion of the numberof Board members60%
60%
Number ofindependentdirectors
Meetings held by theBoard of Shareholders
Proposals reviewed by theBoard of Shareholders
320633
Meetings held bythe Board of Directors
Proposals reviewedby the Board of Directors
Meetings held by theSupervisory Board(before cancellation)
Proposals reviewed by theSupervisory Board(before cancellation)
Unapproved proposals by the Boardof Shareholders, the Board of Directors,
and the Supervisory Board
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
9192
Business interviewsMonitoring and coordinated handling oflitigation, customer complaints, and adminis-trative penaltiesRisks and disputes arising from productcompliance and contract performanceAnalysis of national legislation and regulatorypolicies relevant to core business operationsSources of risks arising from other operations
Risk identi?cation paths
Impact, Risk and Opportunity Management
Strategy
We regard governance and internal control compliance as the cornerstone for development, continuously optimizing our manage-ment structure and operational mechanisms. By effectively responding to risks, we enhance governance ef?ciency, achieving aleap from passive risk control to value creation, thereby solidifying our core competitiveness through high-level governance.
In accordance with the Basic Norms for the Internal Control of Enterprises and its supporting guidelines,we have established and continuously improved our internal control system. We have updated ourInternal Audit Policy and strengthened ongoing monitoring and control activities. Based on regular dailyand special supervision, we conduct periodic evaluations of the effectiveness of internal controls, prompt-ly rectifying any identi?ed de?ciencies to ensure the effective operation of the internal control system.InternalControlManage-ment
RiskManage-ment
Internalaudit
Our internal audit function reports directly to the Audit Committee of the Board, ensuring a high degreeof independence and authority. This structure effectively prevents external interference and ensuresobjectivity and impartiality in audit activities. Through regular special audits and compliance audits, weaccurately identify potential risks in business operations and management processes.We consistently regard compliant operations as the cornerstone of sustainable development. Guidedby internal policies such as the Guidelines for Evidence Collection Management of the Legal A?airs Center, theEntity Certi?cation Management Policy and Guidelines, and the Guidelines on the Management of Seals inRemote Locations, we have established clear compliance objectives and implemented systematic andstandardized management measures to effectively mitigate compliance risks and create long-termvalue for shareholders, customers, and society.We adhere to fundamental risk management principles aligned with national laws and regulations,integrating internal governance requirements to accurately identify potential risks in operations andconduct structured risk materiality assessments. The company implements a “source control” mecha-nism, dynamically monitoring areas that may pose risks, striving to eliminate identi?ed risk hazardsfrom the root. In addition, our legal department prepares annual compliance reports tailored to differ-ent business lines, providing in-depth risk analysis and targeted mitigation recommendations. Thesereports serve as key references for managing similar risks. In terms of risk disposal methods andapproaches, we de?ne clear risk thresholds, establish detailed risk guidelines, and standardize opera-tional practices, thereby enhancing overall risk management capabilities.
Ensure complementary profession-al backgrounds among Boardmembers (strategy, ?nance,technology, etc.), and guaranteethe substantive proportion andvoice of independent directors.Strictly implement the Board ofDirectors Rules, with majordecisions subject to prior reviewand consultation by specializedcommittees.Major investment projects mustundergo mandatory and thoroughfeasibility studies with externalexpert reviews, and establish anaccountability mechanism fordecision-making errors.
Imbalanced Board of Directorsstructure: Unreasonablecomposition of Board members(e.g., in terms of the proportionof independent directors,professional backgrounds) mayundermine the quality ofdecision-making and effective-ness of oversight.Ineffective decision-makingmechanisms: Lack of robustrules of procedure anddecision-making processes maylead to errors or overlycentralized decisions in majormatters such as investment and?nancing.Strategic planning andmanagement risks: Unclear orfrequently changing strategicdirection, or lack of an effectivestrategic implementation andevaluation system, may affectlong-term development.
Board ofDirectorsanddecision-makinggovern-ancerisks
An imbalanced Boardstructure and ineffectivedecision-making mecha-nisms will weaken thescienti?c rigor andforward-looking nature ofstrategic decisions, affectresource allocationef?ciency and executionpace, and constrain theorganization's ability torespond to market changes.Unclear or frequentlychanging strategicdirections may lead tomisallocation of keyresources, squeeze thegrowth space of corebusinesses, dilute the valueof prior investments, andimpact long-term competi-tiveness and the foundationof sustainability.
HighShort-
to mid-
term
Establish a closed-loop accountabil-ity mechanism by improvingsystems, embedding processes,strengthening auditing andinformation-based controls,ensuring effective implementationof systems and manageable risks.Enforce rigorous reviewprocedures, improve governancemechanisms, and utilize informa-tion systems and contingencymeasures to ensure timely,accurate, and complete informationdisclosure, thereby mitigatingregulatory and reputational risks.
De?ciencies in internal controlsystems: Inadequate or poorlyimplemented internal controlsystems may lead to distorted?nancial reports, asset losses, oroperational inef?ciencies.Compliance and informationdisclosure risks: Failure to ful?llinformation disclosureobligations in a timely, accurate,and complete manner may leadto regulatory penalties andreputational damage.
If internal control de?cien-cies and compliance risksare not effectivelymanaged, they may weakenthe foundation for valuecreation, increase operation-al management complexity,and undermine governanceeffectiveness and markettrust, thereby exertingpressure on stableoperations and long-termvalue creation.
Internalcontrolandcompliancerisks
High
Mid-term
Internal Control Objectives
Comply with national laws, regulations, andother relevant provisionsSafeguard corporate assetsEnsuring truthful, accurate, complete, and fairinformation disclosureImprove operational ef?ciency and effectivenessPromote the realization of development strate-gies, etc.
Internal Control Measures
Separation of incompatible duties and controlsAuthorization and approval controlsAccounting system controlsBudget controlsOperational analysis controls and performance evaluation controlsInformation security control measures, etc.
Frequency of risk occurrenceRisk losses
Risk assessment dimensions
Improve existing policies toaddress control gapsEnhance management process-es with mandatory controlsStrengthen incentive andaccountability mechanismswith clear responsibilityassignment
Risk mitigation measuresProcess monitoring and auditingRoutine advisory and consultation supportPolicy development and communicationRisk awareness training and managementComplaint and whistleblowing channels
Risk data monitoring
Risk/Oppor-tunity type
DescriptionFinancial impact
Magn-itude
Impacthorizon
Response measures
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
9394
Information DisclosureInformation Disclosure and Investor Relations Management
Remuneration Management
Party Building Leadership
Indicators and Targets
We strictly comply with internal policies such as the Information Disclosure Management Policy and the Management Policy forDeferred and Exempted Information Disclosure, and ful?ll our information disclosure obligations in accordance with applicablelaws and regulations. We place strong emphasis on the management of insider information, strictly controlling the registra-tion and administration of insiders and internal information users to uphold the principles of fairness and transparency ininformation disclosure and effectively protect the legitimate rights and interests of investors.
Strengthening political leadership and implementing national strategic priorities
Our Party Committee has thoroughly studied and implemented the guiding principles of the 20th National Congress of theCPC and the subsequent plenary sessions, making the national strategic deployments of “accelerating the development ofnew quality productive forces” and “achieving high-level technological self-reliance and strength” the core tasks for the year.The founder of the group, Zhou Hongyi, published a theoretical article titled “Reshaping Productivity with Agents andSafeguarding Innovation with a Security Foundation,” integrating the overall national security concept into the top-leveldesign of corporate strategy, promoting the coordinated development of technological innovation and security assurance.Our Party Committee, in collaboration with New Security (a publication under People’s Daily), has established a “Party Build-ing + Security + Technology” integrated communication matrix, further enhancing Party members’ and of?cials’ politicaljudgment, comprehension, and execution capabilities.
Investor RelationsWe are committed to the core principles of “respecting, rewarding, and protecting investors,” andadhere to the guiding principles of compliance, fairness, proactiveness, and integrity. We activelyestablish diversi?ed communication channels, including earnings brie?ngs, strategy meetings,reverse roadshows, and the SSE e-interactive platform, to facilitate shareholder engagement andenhance communication with both existing and potential investors. These efforts strengthen inves-tor understanding and recognition of the Company, helping to build a stable and high-quality inves-tor base while enhancing corporate governance effectiveness and overall enterprise value.We attach great importance to delivering reasonable returns to investors. Taking into account our current operating condi-tions, future development strategies, and the need to ensure sustainable operations, we implement cash dividend distribu-tions in strict accordance with the pro?t distribution policy set out in the Articles of Association, sharing the results of ourdevelopment with investors. Since our restructuring and relisting in 2018, we have conducted multiple cash dividend distri-butions. By the end of 2025, the total amount of cash dividends we distributed was approximately 5.034 billion yuan, ofwhich the total amount of dividends paid was approximately 3.535 billion yuan, and the total amount spent on share repur-chases was approximately 1.499 billion yuan. In 2025, we conducted 2 cash dividend distributions. On May 30, 2025, wedistributed a cash dividend of 1 yuan (tax inclusive) for every 10 shares, and on September 30, 2025, we distributed anothercash dividend of 1 yuan (tax inclusive) for every 10 shares, totaling approximately 1.4 billion yuan in cash dividends.
The CPC 360 Group Committee consistently adheres to the guidance of Xi Jinping Thought on Socialismwith Chinese Characteristics for a New Era, ?rmly upholding the Company’s strategic positioning as a“national team in digital security and AI.” It deeply integrates Party building into the Company’s techno-logical innovation and security mission, leveraging high-quality Party building to drive high-qualitycorporate development.
In accordance with the Company Law and the Articles of Association, we have established the Remuneration ManagementPolicy for Directors and Senior Management, providing a comprehensive framework for remuneration governance. Thispolicy ensures fairness and reasonableness in remuneration allocation and serves as a robust institutional foundation forimproving corporate governance and supporting the Company’s long-term, stable development.
We leverage the “360 Legal Academy” platform to embed compliance into business scenarios, focusing onpreventive compliance guidelines and practical case analysis. This initiative enhances employees’ risk awarenessand reduces the likelihood of non-compliant behavior.Case:
Proportion of independent directors exceeding 33%No regulatory penalties for information disclosure violations
CompletedCompletedTargetsProgress in 2025
Summary of information disclosure in 2025:
Periodic reports disclosed: 4
Ad hoc announcementsdisclosed: 101
Regulatory penalties related to
information disclosure: None
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
9596
Anti-Bribery and Anti-CorruptionWe consistently regard integrity governance as the cornerstone of our steady and sustainable development. By strength-ening institutional frameworks, enhancing internal controls, standardizing external cooperation, and improvingwhistleblowing mechanisms, we have built a comprehensive integrity ecosystem in which “corruption is deterred, prevent-ed, and discouraged,” thereby fostering a transparent, compliant, and well-regulated business environment.
Focusing on strategic transformation and driving innovation through Party buildingIn 2025, the Group have deeply advanced the “ALL IN AGENT” planning, fully entering the ?eld of agents. The Party Commit-tee implemented the “Red Engine” project, establishing the “AI + Security” Party Member Vanguard Team, which plays apivotal role in tackling key technologies, product implementation, and ecological construction. With the support of the PartyCommittee, the Group launched an enterprise-level platform covering L2-L4 agents, promoting the deep integration of AIwith various industries. The Party Committee also promoted the establishment of a “Party Building + Security Governance”mechanism and formed a “Large Model Security Task Force,” embedding security reviews and ethical assessments through-out the entire lifecycle of agent development to ensure that technology consistently serves national and societal interests.
Enhancing organizational development and consolidating the foundations of Party buildingThe Party Committee strictly implements foundational Party governance mechanisms such as the “Three Meetings and OneLecture” system and themed Party Day activities. It continues to carry out patriotism education and thematic educationinitiatives, integrating Party member education and management with the evolving demands of the times.
Improving the Integrity Governance System
We place great importance on the development of integrity-relat-ed systems. We have established a series of policies and regula-tions, including the Internal Audit Policy, the Anti-Fraud ManagementPolicy, the Measures for the Administration of Personnel in KeyPositions, the Regulations on the Acceptance and Handling of Gifts, theWhistleblower Protection and Reward Policy, and the Policy on theManagement of Permanently Disquali?ed Suppliers. These frame-works cover key areas such as employee conduct, suppliermanagement, and internal auditing.
Strengthening security foundations and ful?lling the missionof “Serving the nation through technology”
The Party Committee spearheaded the “Red Talent Program,” focusing oncultivating interdisciplinary young professionals pro?cient in both technologyand Party affairs. It has established Party responsibility zones and demonstra-tion posts across ?elds such as AI, big data, and cybersecurity, building a“digital security force” led by Party-member technical experts. To date, theGroup has developed a globally leading cybersecurity big data system, witheight core indicators ranking ?rst domestically.
The “AI + Security” Party Member Vanguard Team
Anti-APT Party Member
Commando Team
Municipal Organization Department’s researchvisit on Party building at 360 Group
The Department of Hong Kong, Macao, andTaiwan Affairs of the Ministry of Foreign Affairsjointly held a themed Party Day activity with the
Party Committee of 360 GroupThe CPC 360 Group Committee collaborated withCapital Normal University to carry out joint Party
building activities
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
9798
Fight Against Unfair CompetitionWe strictly comply with the Law of the People’s Republic of China AgainstUnfair Competition and the Anti-Monopoly Law of the People's Republic ofChina, and have developed the 360 Group Anti-Monopoly ComplianceManual, embedding the principle of fair competition throughout allbusiness operations. We adopt a zero-tolerance stance toward anyconduct that undermines fair market competition, actively combatingunfair competition and monopolistic practices, safeguarding a healthyand orderly market environment, and contributing to the sustainabledevelopment of the industry. The 360 Group Anti-Monopoly ComplianceManual systematically covers key areas, including updates on anti-mo-nopoly regulations, merger control, monopoly agreements, abuse ofdominant market position, and practical compliance guidance, providinga solid institutional foundation for antitrust compliance management.
In terms of publicity and training, we promote the antitrust compliancethrough multiple internal channels, including our intranet, announcements,and email communications, requiring all employees to complete online videotraining to ensure broad-based awareness of antitrust principles. For keydepartments and personnel in critical positions, we organize specializedtraining to further enhance understanding and execution. In 2025, the LegalCompliance Department conducted a series of thematic training sessions onanti-unfair competition, combining both online and of?ine formats, acrossmultiple business segments, including internet and gaming operations. Theseinitiatives have continuously enhanced legal risk awareness among ourbusiness units and effectively mitigated risks related to unfair competition.
In practice, the Legal and Compliance Department conducts a comprehensive review of historical transactions to identifypotential risks of failure to ?le merger control noti?cations as required by law. With the support of external professionaladvisors, such risks are assessed by category and recti?cation measures are implemented accordingly. In the proposed invest-ment and merger transactions, we perform ex-ante analyses of merger control ?ling obligations, with assessment resultsserving as a key basis for internal approval. During contract review, particular attention is paid to the risk of monopoly agree-ments. Standard-form contracts, joint procurement agreements, and joint sales agreements are subject to enhanced ex-antereview. For product lines with competitive advantages, we strengthen the identi?cation and prevention of potential self-pref-erencing or exclusionary conduct. All such matters must be reviewed by the Legal and Compliance Department. In addition,antitrust compliance has been incorporated into departmental and employee performance evaluation systems to reinforceaccountability.
Strengthening Internal Integrity ControlsTo effectively prevent and combat fraudulent activities, we have established anEthics Committee as the sole independent department responsible for fraudinvestigations, reporting directly to management. When departments discoversuspected fraudulent activities during daily management and inspections, theyshould promptly report to the Ethics Committee via the dedicated email (jubaox-in@360.cn).Any violation of the Anti-Fraud Management Policy by employees constitutes adisciplinary offense. Depending on the severity, disciplinary actions may includeverbal warnings, written warnings, public criticism, or termination of employ-ment. In addition, we promote a culture of integrity through company-wide emailnoti?cations and internal case-based alerts, fostering a working environmentwhere employees are intrinsically motivated to uphold ethical standards.Ensuring Integrity in External Cooperation
We signed the Business Integrity Agreement with all partners, clearly de?ning both parties' commitment to uphold business integ-rity standards and completely eliminate commercial bribery, thereby building a solid integrity defense. In accordance with thePolicy on the Management of Permanently Disquali?ed Suppliers, any supplier involved in fraudulent activities will be placed on a“permanently disquali?ed supplier” list, prohibiting all departments from engaging in any form of cooperation with suchentities. In exceptional circumstances where cooperation is deemed necessary, special approval and ?ling procedures must becompleted.
Improving the Whistleblower Protection Mechanism
We encourage all employees and partners to actively report fraudulent activities. Dedicated reporting channels, including areporting email and hotline, have been established, and veri?ed reports are eligible for rewards. The Ethics Committee prioritiz-es con?dentiality during fraud investigations, and implements strict control processes for report acceptance and investigation,ensuring the personal information and reporting materials of whistleblowers are kept con?dential. For real-name reports, theCommittee has established a special “protection list,” with designated personnel responsible for communication, rewards, andprotection. Any breach of con?dentiality obligations will result in strict disciplinary action, and where criminal conduct isinvolved, legal liability will be pursued in accordance with the law.
Training and Awareness Programs
We regularly conduct integrity-themed publicity, focusing on the interpretation of integrity policies, popularizing integrityknowledge, case-based warnings, and updates on major integrity-related meetings and initiatives, thereby continuouslystrengthening company-wide integrity education. Targeted training programs are delivered to different groups, includingmanagement, new employees, and various business units, through both online and of?ine channels. These initiatives commu-nicate the Company’s integrity policies and enhance employees’ understanding of relevant systems. Through diverse forms ofengagement, we continuously reinforce employees’ awareness of integrity and compliance, fostering a clean, ethical, andprofessional working environment.
jubaoxin@360.cn
Reporting Channels:
Email:
Submit reports to jubaoxin@360.cnFollow the of?cial WeChat account “360 EthicsCommittee” and submit reports as instructed
Send correspondence to “Block B, 360 Building, No. 6Jiuxianqiao Road, Chaoyang District, Beijing” (Recipient:
Ethics Committee)
Make an appointment and submit reports at designat-ed reception locations
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
Key Performance Table
99100
IndicatorUnit2025
EnvironmentalDirect GHG emissions (Scope 1)Indirect GHG emissions (Scope 2)Total GHG emissionsGHG emission intensityDiesel consumptionGasoline consumptionNatural gas consumptionElectricity consumptionTotal energy consumptionComprehensive energy consumption intensityTotal water resource consumptionWater resource consumption intensity
tCO2etCO2etCO2etCO2e per million yuan in revenue
tonstonsStandard cubic meters
MWh
TCETCE per million yuan in revenue
tonstons per million yuan in revenue
255.80
11,686.9311,942.73
1.37
1.22
8.57
104,47522,025.872,860.32
0.33
139,099
16.00
Total number of employeesNumber of employees with master's degrees or higherNumber of employees with bachelor's degreesNumber of employees with associate degreeNumber of employees with other degreesNumber of R&D personnelNumber of salespeopleNumber of management personnelGeneral staff training participation rateInvestment in work-related injury insurance
////////%yuan
5,2731,0683,561
3,0181,759
over 4,000,000
Social
IndicatorUnit2025
Social
Governance
Meetings held by the Board of ShareholdersUnapproved proposals by the Board of Shareholders,the Board of Directors, and the Supervisory BoardMeetings held by the Board of DirectorsMeetings held by the Supervisory Board (before cancellation)Number of independent directorsProportion of independent directorsPeriodic reports disclosedAd hoc announcements disclosed
/////%//
%%%%yuan
57.23
37.11
About 400,000
Employee work injury insurance coverage rateSafety drill coverage rateR&D personnel as a percentage of our workforceR&D spending as a percentage of our operating revenueFunding for rural revitalization
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT
Due Diligence and Stakeholder EngagementDouble Materiality AssessmentMateriality Assessment Results
Article 9, 53Article 5Article 5
3-1/2-14/2-23/2-29
3-13-1/3-2/3-3
Report Index
101102
Materiality Assessment
Contents
Guidelines No. 14 of Shanghai StockExchange for Self-Regulation of Listed Compa-nies — Sustainability Report (Trial)
GRI Standards 2021Contents
Guidelines No. 14 of Shanghai StockExchange for Self-Regulation of Listed Compa-
nies — Sustainability Report (Trial)
GRI Standards 2021Report PrefaceMessage from the Chairman
Article 6
/////
2-2 / 2-32-6/2-22
2-1/2-6/
Company Pro?leOur Corporate CultureOur BusinessOur Honors for the Year
ESG Governance Framework
Sustainability Governance FrameworkSustainability Management MechanismsESG Capability Improvement
Article 12Article 12Article 12
2-92-11/2-12/2-13/2-18
2-17
Environmental Commitment
Climate Change ResponseEnvironmental Compliance ManagementPollutant and Waste ManagementEnergy ConsumptionWater Resource ConsumptionCircular EconomyEcosystem and Biodiversity Conservation
Articles 21 to 27
Article 33Articles 30 and 31Articles 34 to 35
Article 36
Article 37
Article 32
2-4/2-23/2-24/201-2/305-1/305-2/305-4
2-23/2-242-4/2-23/2-24/303-2/306-1/306-2/306-32-4/2-23/2-24/302-1/302-3/302-4/302-5
2-4/2-23/2-24/303-52-23/2-24/301-1/301-2
304-3
Social Commitment
Employees
Safety and Quality of Products and ServicesData Security and Customer Privacy ProtectionInnovation-Driven DevelopmentEthics in Science and TechnologyWin-Win CooperationRural RevitalizationSocial Contribution
Article 49, 50
Article 47Article 48Article 41, 42
Article 43Article 45, 46
Article 39
Article 40
2-7/2-23/2-24/201-1/201-3/401-1/401-2/403-1/403-2/403-3/403-5/403-9/404-1
/404-2/405-1/406-1
2-23/2-24/418-1
2-4/2-23/2-24
2-23/2-242-23/2-24/2-25/308-2/414-1
201-1/203-1/203-22-4/2-23/2-24/201-1/203-1/203-2
/413-1/413-2/415-1
2-23/2-24/2-25/2-26/416-1
/416-2/417-1/417-2/417-3
Governance Commitment
Corporate Governance MechanismRemuneration ManagementParty Building LeadershipAnti-Bribery and Anti-CorruptionFight Against Unfair CompetitionKey Performance TableReport Index
Article 51
//Article 55Article 56
//
2-9/2-13/2-16/2-23/2-24
/2-29/207-1/207-22-19/2-20/2-23/2-24
/2-23/2-24/2-26/205-2
2-23/2-24
/
/
About 360 Security
2025 Environmental, Social and Governance (ESG) ReportABOUT 360 SECURITYMATERIALITY ASSESSMENTESG GOVERNANCE FRAMEWORKENVIRONMENTAL COMMITMENTSOCIAL COMMITMENTGOVERNANCE COMMITMENT