diff --git a/apps/web/messages/en.json b/apps/web/messages/en.json
index 814c11f17..b28d6f29a 100644
--- a/apps/web/messages/en.json
+++ b/apps/web/messages/en.json
@@ -69,7 +69,8 @@
     "classicAICenter": "Classic AI Center",
     "governance": "AI Governance",
     "awooop": "AwoooP",
-    "iwooos": "IwoooS"
+    "iwooos": "IwoooS",
+    "iwooosSecurityCompliance": "IwoooS 安全合規"
   },
   "locale": {
     "switch": "Switch Language",
diff --git a/apps/web/messages/zh-TW.json b/apps/web/messages/zh-TW.json
index 124f7dc54..7b32c2c68 100644
--- a/apps/web/messages/zh-TW.json
+++ b/apps/web/messages/zh-TW.json
@@ -69,7 +69,8 @@
     "classicAICenter": "經典 AI 中心",
     "governance": "AI 治理",
     "awooop": "AwoooP",
-    "iwooos": "IwoooS"
+    "iwooos": "IwoooS",
+    "iwooosSecurityCompliance": "IwoooS 安全合規"
   },
   "locale": {
     "switch": "切換語系",
diff --git a/apps/web/src/components/layout/sidebar.tsx b/apps/web/src/components/layout/sidebar.tsx
index 4af026774..d31ea0a42 100644
--- a/apps/web/src/components/layout/sidebar.tsx
+++ b/apps/web/src/components/layout/sidebar.tsx
@@ -54,6 +54,7 @@ type NavItemConfig = {
   href: string
   labelKey: string
   Icon: typeof LayoutDashboard
+  aliases?: string[]
   badge?: boolean // 是否顯示動態徽章
 }
 
@@ -71,7 +72,7 @@ type NavSection = {
 // 可觀測性 /observability → 整合: 監控 + APM + 錯誤 + 應用 + 服務 (5 Tab) [暫指 /monitoring]
 // 自動化 /automation → 整合: 自動修復 + 神經指揮 + Drift (3 Tab) [暫指 /auto-repair]
 // 營運 /operations → 整合: 部署 + 工單 + 成本 + 行動日誌 + 計費 (5 Tab) [暫指 /deployments]
-// 安全合規 /security-compliance → 整合: 安全 + 合規 (2 Tab) [暫指 /security]
+// IwoooS 安全合規 /iwooos → 整合: IwoooS + 安全合規；/security-compliance 保留相容高亮
 // 知識 /knowledge → 知識庫 [暫指 /knowledge-base]
 // ============================================================
 
@@ -84,8 +85,7 @@ const NAV_SECTIONS: NavSection[] = [
       { id: 'observability',       href: '/observability',          labelKey: 'observability',     Icon: Monitor },
       { id: 'automation',          href: '/automation',             labelKey: 'automation',        Icon: Wrench },
       { id: 'operations',          href: '/operations',             labelKey: 'operations',        Icon: Package },
-      { id: 'security-compliance', href: '/security-compliance',    labelKey: 'securityCompliance',Icon: Shield },
-      { id: 'iwooos',              href: '/iwooos',                 labelKey: 'iwooos',            Icon: Radar },
+      { id: 'iwooos-security',     href: '/iwooos',                 labelKey: 'iwooosSecurityCompliance', Icon: Radar, aliases: ['/security-compliance'] },
       { id: 'knowledge',           href: '/knowledge',              labelKey: 'knowledge',         Icon: BookOpen },
       { id: 'governance',          href: '/governance',             labelKey: 'governance',        Icon: ShieldCheck },
       { id: 'awooop',              href: '/awooop/work-items',      labelKey: 'awooop',           Icon: BrainCircuit },
@@ -132,7 +132,7 @@ export function Sidebar({
     setMounted(true)
   }, [])
 
-  const isActive = (href: string) => {
+  const isRouteActive = (href: string) => {
     const fullHref = `/${locale}${href === '/' ? '' : href}`
     if (href === '/') {
       return pathname === `/${locale}` || pathname === `/${locale}/`
@@ -140,6 +140,10 @@ export function Sidebar({
     return pathname === fullHref || pathname.startsWith(fullHref + '/')
   }
 
+  const isActive = (item: NavItemConfig) => (
+    isRouteActive(item.href) || item.aliases?.some(alias => isRouteActive(alias)) === true
+  )
+
   return (
     <aside
       className={cn(
@@ -178,7 +182,7 @@ export function Sidebar({
               </div>
             )}
             {section.items.map(item => {
-              const active = isActive(item.href)
+              const active = isActive(item)
               const count = item.badge && mounted ? pendingCount : 0
               return (
                 <Link
@@ -226,7 +230,7 @@ export function Sidebar({
 
         {/* 底部菜單 */}
         {BOTTOM_NAV_ITEMS.map(item => {
-          const active = isActive(item.href)
+          const active = isActive(item)
           return (
             <Link
               key={item.id}
diff --git a/docs/LOGBOOK.md b/docs/LOGBOOK.md
index 84f5d9f9b..46e616cfa 100644
--- a/docs/LOGBOOK.md
+++ b/docs/LOGBOOK.md
@@ -1,3 +1,48 @@
+## 2026-05-31｜IwoooS 與安全合規側邊欄入口整合
+
+**背景**：
+
+- 使用者指出側邊欄同時出現「安全合規」與「IwoooS」，前台入口容易被理解成兩套資安系統。
+- 既有 `/security-compliance` 已改成 IwoooS 的熟悉入口與摘要頁，但側邊欄仍保留兩個菜單，造成 UI/UX 重複。
+
+**本次調整**：
+
+- 側邊欄只保留一個資安入口：`IwoooS 安全合規`，導向 `/iwooos`。
+- 移除獨立的 `/security-compliance` 側邊欄菜單；舊路由仍保留頁面與相容性。
+- `/security-compliance` 被加入同一個 IwoooS 菜單的路由別名，使用者從舊網址進來仍會看到 `IwoooS 安全合規` 被高亮。
+- `zh-TW.json` 與 `en.json` 新增 `nav.iwooosSecurityCompliance`，顯示文案維持繁體中文。
+- `security-mirror-progress-guard.py` 新增防退化檢查，避免未來又把「安全合規」與「IwoooS」拆成兩個側邊欄入口。
+
+**驗證**：
+
+```text
+python3 -m json.tool apps/web/messages/zh-TW.json
+  -> pass
+python3 -m json.tool apps/web/messages/en.json
+  -> pass
+python3 -m py_compile scripts/security/security-mirror-progress-guard.py scripts/security/source-control-owner-response-guard.py
+  -> pass
+python3 scripts/security/security-mirror-progress-guard.py
+  -> SECURITY_MIRROR_PROGRESS_GUARD_OK
+python3 scripts/security/source-control-owner-response-guard.py
+  -> SOURCE_CONTROL_OWNER_RESPONSE_GUARD_OK
+pnpm --dir apps/web exec tsc --noEmit --tsBuildInfoFile /tmp/awoooi-iwooos-menu-merge-20260531-postrebase.tsbuildinfo
+  -> pass
+NEXT_PUBLIC_API_URL=https://awoooi.wooo.work pnpm --dir apps/web run build
+  -> pass
+本地 Playwright（production build / next start）:
+  /zh-TW/iwooos 桌機 1280px -> 只有一個 IwoooS 安全合規菜單，沒有 /security-compliance 菜單 href，已高亮，無水平溢出
+  /zh-TW/security-compliance 桌機 1280px -> 同一個 IwoooS 安全合規菜單透過路由別名高亮，無重複菜單，無水平溢出
+  /zh-TW/iwooos 手機 390px -> 只有一個 /iwooos 菜單 href，無重複菜單，已高亮，無水平溢出
+  /zh-TW/security-compliance 手機 390px -> 同一個 /iwooos 菜單 href 透過路由別名高亮，無重複菜單，無水平溢出
+```
+
+**進度邊界**：
+
+- 整體資安網仍維持 `61%`。
+- 本輪是導覽與 UI/UX 去重，不是執行期強制控管。
+- active runtime gate 仍為 `0`；沒有新增掃描、SSH、主機更新、修復、批准、部署按鈕或 GitHub primary 切換。
+
 ## 2026-05-31｜IwoooS 全產品只讀套用快照部署完成
 
 **背景**：
diff --git a/scripts/security/security-mirror-progress-guard.py b/scripts/security/security-mirror-progress-guard.py
index 55eaea9c3..c6d2a859b 100755
--- a/scripts/security/security-mirror-progress-guard.py
+++ b/scripts/security/security-mirror-progress-guard.py
@@ -148,6 +148,9 @@ def validate(root: Path) -> None:
     iwooos_bridge = (
         root / "apps" / "web" / "src" / "components" / "security" / "iwooos-read-only-bridge.tsx"
     ).read_text(encoding="utf-8")
+    sidebar = (root / "apps" / "web" / "src" / "components" / "layout" / "sidebar.tsx").read_text(
+        encoding="utf-8"
+    )
     web_messages_zh = load_json(root / "apps" / "web" / "messages" / "zh-TW.json")
     web_messages_en = load_json(root / "apps" / "web" / "messages" / "en.json")
 
@@ -199,6 +202,21 @@ def validate(root: Path) -> None:
     intake_contracts = [contract for wave in intake["intake_waves"] for contract in wave["contracts"]]
     assert_contains("intake.contracts", intake_contracts, "iwooos_posture_projection_v1")
 
+    assert_text_contains("sidebar.iwooos_security_unified_entry", sidebar, "id: 'iwooos-security'")
+    assert_text_contains("sidebar.iwooos_security_label", sidebar, "labelKey: 'iwooosSecurityCompliance'")
+    assert_text_contains("sidebar.security_compliance_alias", sidebar, "aliases: ['/security-compliance']")
+    assert_text_not_contains("sidebar.duplicate_security_compliance_entry", sidebar, "id: 'security-compliance'")
+    assert_equal(
+        "web_messages.zh-TW.nav.iwooosSecurityCompliance",
+        web_messages_zh["nav"]["iwooosSecurityCompliance"],
+        "IwoooS 安全合規",
+    )
+    assert_equal(
+        "web_messages.en.nav.iwooosSecurityCompliance",
+        web_messages_en["nav"]["iwooosSecurityCompliance"],
+        "IwoooS 安全合規",
+    )
+
     progress = rollup["progress_estimate"]
     assert_equal("progress.overall_percent", progress["overall_percent"], 61)
     assert_equal("progress.framework_percent_min", progress["framework_percent_min"], 86)