National research institute site · Accessibility & security compliant
2026
The Institute of Atomic and Molecular Sciences (IAMS), Academia Sinica is a national research institute spanning physics, chemistry, and life sciences. This project rebuilt its public website while meeting government requirements for web accessibility, information security, and on-premise deployment.
The system is built on a custom content-management platform with bilingual support, letting staff independently maintain news, events, research highlights, and recruitment — with Chinese and English managed in a single interface to lower the maintenance barrier.
Delivery uses containerization, packaged into offline installation media and deployed inside an air-gapped internal environment. The site went live after passing accessibility testing and an information-security vulnerability scan.
A Chinese / English admin lets staff maintain both languages from one interface, while the front end switches automatically by locale — eliminating duplicate build and maintenance effort.
News and announcements are managed by category with display dates and automatic publish/unpublish scheduling, so expired items close at the set time without manual intervention.
Manage talks, seminars, and other events with scheduled dates and categories. The front end presents upcoming activities in chronological order to keep the community informed.
Research highlights, journal papers, and academic honors are showcased through image-text cards and carousels, conveying the institute's research output and international impact.
Job openings, researcher recruitment, and graduate-program admissions are managed centrally with clear application information, supporting talent acquisition and international program enrollment.
Designed to government accessibility standards: semantic structure, keyboard operability, skip-to-content, compliant color contrast, and custom accessible error pages — verified by accessibility testing.
Security response headers, access and authentication controls, and ongoing dependency patching. Findings from third-party vulnerability scans were remediated and retested to meet agency security requirements.
The application, queue, and scheduler services are containerized and packaged into offline installation media, enabling deployment inside an air-gapped internal environment.
The admin is a custom content-management system, modeling news, events, research highlights, and recruitment as admin resources, with navigation groups and role-based access tailored to the institute's workflow so non-technical staff can maintain content intuitively.
The front end uses static site generation: content is pre-rendered into pure static HTML for public serving, while the dynamic system and admin are never exposed externally. Only the generated static files run in the public environment, dramatically reducing the attack surface and speeding up load times — a strong fit for government on-premise deployment and security requirements.
The front end uses URL-prefixed locale routing, while the admin maintains Chinese and English fields on the same record, with both content and UI strings driven by i18n. The site renders the correct locale automatically and emits proper language markup for both international and domestic readers.
The entire site follows government accessibility standards: semantic structure, keyboard operability, skip-to-content, compliant color contrast, and custom accessible error pages, with added assistive-technology support for dynamic components — ultimately passing accessibility testing.
Comprehensive security response headers, access and authentication controls, and continuous dependency patching were applied. Before launch, findings from a third-party vulnerability scan were remediated and retested to meet the agency's security standards.
A multi-stage build produces a lean application image, and the application, queue, and scheduler services are orchestrated with container technology. All images and deployment files are packaged into offline installation media for installation, database initialization, and startup inside an air-gapped internal environment.
A scheduler handles automatic publish/unpublish of content; expired news and events close at the set time, paired with clear display-date hints in the admin, keeping front-end information current and reducing manual upkeep.
CONTACT US
Whether it's a government agency, academic unit, or non-profit organization — needing accessibility compliance, security testing, or air-gapped on-premise deployment — we build the right solution to spec.
Contact Us
