[Predisclosure-applications] Xen predisclosure application: Wavecon GmbH

[Sebastian Pipping <spipping@xxxxxxxxxx>]

Hello!


I am hereby sending an application for the predisclosure list on behalf
of Wavecon GmbH, a public cloud and managed hosting company based in
Germany powered by Xen technology.


> The name of your organization

Wavecon GmbH
https://www.wavecon.de/


> Domain name(s) which you use to provide Xen software/services

*.wavecloud.de / https://control.wavecon.de


> A brief description of why you fit the criteria

Wavecon does not fit the 300k definition of "large-scale users" but is
a public hosting provider with >100 Xen hypervisors.
The core service of the company lies in providing hosting based on Xen
to third parties. Most employees work with services powered by Xen,
some people work on development of Xen orchestration software full-time.
Wavecon's data center, infrastructure and service are certified
according to ISO 27001.

To Wavecon, release of vulnerabilities in Xen may or may not require
reboots of some to all hypervisors, so Xen vulnerabilities have a
significant impact on our day-to-day operations.


> If not all of your products/services use Xen, a list of (some of)
> your products/services (or categories thereof) which do.

Xen is the only virtualization technology used in production at Wavecon.


> Link(s) to current public web pages, belonging to your organisation,
> for each of following pieces of information:
>  Evidence of your status as a service/software provider:
>   If you are a public hosting provider, your public rates or how to
>   get a quote

Please refer to https://www.wavecon.de/download/Preisliste_Wavecon.pdf
at https://www.wavecon.de/impressum.html for quotes.
The same page is pointing to sales(at)wavecon(dot)de for custom quotes.


>   If you are a software provider, how your software can be downloaded
>   or purchased

n/a


>   If you are an open-source project, a mailing list archive and/or
>   version control repository, with active development

n/a


>  Evidence of your status as a user/distributor of Xen:
>   Statements about, or descriptions of, your eligible production
>   services or released software, from which it is immediately evident
>   that they use Xen.

Please see "Mit Hilfe von Xen [..]" at
https://www.wavecon.de/dienstleistungen.html


>  Information about your handling of security problems:
>   Your invitation to members of the public, who discover security
>   problems with your products/services, to report them in confidence
>   to you;

Please see "Please report security issues [..]" at
https://www.wavecon.de/impressum.html .


>   Specifically, the contact information (email addresses or other
>   contact instructions) which such a member of the public should use.

security(at)wavecon(dot)de


> A statement to the effect that you have read this policy and agree to
> abide by the terms for inclusion in the list, specifically the
> requirements to regarding confidentiality during an embargo period

We have read the policy at
http://www.xenproject.org/security-policy.html
and agree to its terms as retrieved 2015-03-10:

 * Cemil Degirmenci

 * Sebastian Pipping

 * Wolodja Wentland


> The single (non-personal) email alias you wish added to the
> predisclosure list.

security(at)wavecon(dot)de


Many thanks for your consideration.

Best,



Sebastian Pipping

_______________________________________________
Predisclosure-applications mailing list
Predisclosure-applications@xxxxxxxxxxxxxxxxxxxx
http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications