Security pre-disclosure list

We realize that CloudStack is considered critical infrastructure in many organizations, and as such these organizations need as much advance notice on security issues as possible so they can respond in a timely manner. With this end, we created the pre-disclosure list.

The Security Team defines which organizations are admitted to the pre-disclosure list.  Generally, well-established organizations with a mature security response process will be considered on a case-by-case basis.  Organizations that meet the criteria should contact security@cloudstack.apache.org  if they wish to participate in the pre-disclosure activities.  The list of entities on the pre-disclosure list is public. No organization may privately receive pre-disclosure information.

This is a list of organizations on the pre-disclosure list

• Citrix