|
Hi Andrew-
We’re a hosting provider, so we generally don’t publicize the infrastructure platforms we use for our customers. Because of that, we don’t have much publicly available evidence of our status as a XenServer user.
I can provide our current XenServer host count if that would satisfy the request, but I’m not sure what additional evidence I could offer. I also believe you were directly involved with the AMD Turin microcode issue about a year ago. We wouldn’t have been pushing
for that microcode update if we weren’t heavily using XenServer. Would that be sufficient to qualify as evidence?
Darryl
From: Andrew Cooper <andrew@xxxxxxx>
Sent: Friday, July 10, 2026 3:14 PM
To: Jake Vondra <jvondra@xxxxxxxx>; predisclosure-applications@xxxxxxxxxxxxxxxxxxxx <predisclosure-applications@xxxxxxxxxxxxxxxxxxxx>
Cc: Darryl Voss <Darryl@xxxxxxxx>; alex.brett@xxxxxxxxxx <alex.brett@xxxxxxxxxx>
Subject: Re: Epic Hosting - Xen Pre-Disclosure Submission
External Mail. Careful of links / attachments. Submit Helpdesk if unsure.
On 28/05/2026 6:00 pm, Jake Vondra wrote:
I am writing to request an addition to the Pre-Disclosure program – my responses to the requested prompts are in bold below.
- The name of your organization:
Epic Hosting LLC
- Domain name(s) which you use to provide Xen software/services:
epichosted.com
- A brief description of why you fit the criteria:
we are a large scale enterprise delivering our integrated healthcare software
- If not all of your products/services use Xen, a list of (some of) your products/services (or categories thereof) which do:
we largely deliver the application presentation layer via XenServer
- Link(s) to current public web pages, belonging to your organisation, for each of following pieces of information:
- Evidence of your status as a service/software provider:
https://www.epic.com/
- If you are a public hosting provider, your public rates or how to get a quote:
NA
- If you are a software provider, how your software can be downloaded or purchased:
https://www.epic.com/contact/
- If you are an open-source project, a mailing list archive and/or version control repository, with active development:
NA
- Evidence of your status as a user/distributor of Xen: NA
- Statements about, or descriptions of, your eligible production services or released software, from which it is immediately evident that they use Xen.
- Information about your handling of security problems:
https://www.epic.com/epic/page/reporting-potential-security-vulnerability/
- Your invitation to members of the public, who discover security problems with your products/services, to report them in confidence to you;
- Specifically, the contact information (email addresses or other contact instructions) which such a member of the public should use.
- A statement to the effect that you have read this policy and agree to abide by the terms for inclusion in the list, specifically the requirements to regarding confidentiality during an
embargo period: Acknowledged – this has been reviewed
- The single (non-personal) email alias you wish added to the predisclosure list:
XenServer-Notices@xxxxxxxx
Hello, Thankyou for your application and sorry for the delay.
Most looks to be in order, but NA really isn't ok for your evidence as a user of Xen. Is there nothing you can point to? Not even a statement of which platforms are supported by EPIC?
Regards,
Andrew
|
