Re: Epic Hosting - Xen Pre-Disclosure Submission

[Andrew Cooper <andrew@xxxxxxx>]

Thankyou,

Per the discussion at XenSummit, we consider this sufficient confirmation.

~Andrew

On 22/09/2026 1:21 pm, Alex Brett wrote:
> Hello Xen security team,
>
> On behalf of Citrix / XenServer, and as per the in-person discussion
> at Xen Summit in Munich, I can confirm that Epic Hosting LLC are a
> XenServer user, and in our opinion qualify as a "Large-scale
> organisational user of Xen" and thus should be added to the
> pre-disclosure list.
>
> Many thanks,
> Alex Brett
> Chief Engineer, XenServer
> ------------------------------------------------------------------------
> *From:* Jake Vondra <jvondra@xxxxxxxx>
> *Sent:* 28 May 2026 18:00
> *To:* predisclosure-applications@xxxxxxxxxxxxxxxxxxxx
> <predisclosure-applications@xxxxxxxxxxxxxxxxxxxx>
> *Cc:* Darryl Voss <Darryl@xxxxxxxx>; Alex Brett <alex.brett@xxxxxxxxxx>
> *Subject:* Epic Hosting - Xen Pre-Disclosure Submission
>  
>
> I am writing to request an addition to the Pre-Disclosure program – my
> responses to the requested prompts are in bold below.
>
>  
>
>   * The name of your organization: *Epic Hosting LLC*
>   * Domain name(s) which you use to provide Xen software/services:
>     *epichosted.com*
>   * A brief description of why you fit the criteria: *we are a large
>     scale enterprise delivering our integrated healthcare software*
>   * If not all of your products/services use Xen, a list of (some of)
>     your products/services (or categories thereof) which do: *we
>     largely deliver the application presentation layer via XenServer*
>   * Link(s) to current public web pages, belonging to your
>     organisation, for each of following pieces of information:
>       o Evidence of your status as a service/software provider:
>         *https://www.epic.com/*
>       o If you are a public hosting provider, your public rates or how
>         to get a quote: *NA*
>       o If you are a software provider, how your software can be
>         downloaded or purchased: *https://www.epic.com/contact/*
>   * If you are an open-source project, a mailing list archive and/or
>     version control repository, with active development: *NA*
>   * Evidence of your status as a user/distributor of Xen:*NA*
>       o Statements about, or descriptions of, your eligible production
>         services or released software, from which it is immediately
>         evident that they use Xen.
>   * Information about your handling of security problems:
>     
> *https://www.epic.com/epic/page/reporting-potential-security-vulnerability/*
>       o Your invitation to members of the public, who discover
>         security problems with your products/services, to report them
>         in confidence to you;
>       o Specifically, the contact information (email addresses or
>         other contact instructions) which such a member of the public
>         should use.
>   * A statement to the effect that you have read this policy and agree
>     to abide by the terms for inclusion in the list, specifically the
>     requirements to regarding confidentiality during an embargo
>     period: *Acknowledged – this has been reviewed*
>   * The single (non-personal) email alias you wish added to the
>     predisclosure list:*XenServer-Notices@xxxxxxxx
>     <mailto:XenServer-Notices@xxxxxxxx>*
>
>  
>
> Regards,
>
> *Jake Vondra*
>
> /Epic///| Hosting | 608-271-9000
>
>  
>