We realize that CloudStack is considered critical infrastructure in many organizations, and as such these organizations need as much advance notice on security issues as possible so they can respond in a timely manner. With this end, we created the pre-disclosure list.
The Security Team defines which organizations are admitted to the pre-disclosure list. Generally, well-established organizations with a mature security response process will be considered on a case-by-case basis. Organizations that meet the criteria should contact security@cloudstack.apache.org if they wish to participate in the pre-disclosure activities. The list of entities on the pre-disclosure list is public. No organization may privately receive pre-disclosure information.
This is a list of organizations on the pre-disclosure list