Vulnerability Reporting

Cloudability understands and values the trust our customers place in us. We take security very seriously, and investigate all reported vulnerabilities. This page describes our practice for addressing potential vulnerabilities in any aspect of our services.

Key ID: DC81B5FAABA9DEB1
Type: RSA
Size: 3072/3072
Created: 2012-01-03
Expires: 2014-01-02
User ID: Cloudability Security Team / security@cloudability.com
Key fingerprint: 0AC6 CD16 AEE8 6A50 8436 EEE3 DC81 B5FA ABA9 DEB1

If you believe you have discovered a vulnerability in Cloudability, contact us as described above. So that we may more rapidly and effectively respond to your report, please provide any supporting material (proof-of-concept code, tool output, etc.) that would be useful in helping us understand the nature and severity of the vulnerability.

We will review the submitted report, and assign it a tracking number. We will then respond to you, acknowledging receipt of the report, and outline the next steps in the process.

Once the report has been reviewed, Cloudability will work to validate the reported vulnerability and reproduce it. If additional information is required in order to validate or reproduce the issue, we will work with you to obtain it. When the initial investigation is complete, results will be delivered to you along with a plan for resolution and public disclosure.

If the issue cannot be validated, or is not found to be a flaw in a Cloudability product, this will be shared with you.

In order to protect our customers, Cloudability requests that you not post or share any information about a potential vulnerability in any public setting until we have researched, responded to, and addressed the reported vulnerability and informed customers if needed. Also, we respectfully ask that you do not post or share any data belonging to our customers. Addressing a valid reported vulnerability will take time. This will vary based on the severity of the vulnerability and the affected systems.


-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.11 (Darwin)
Comment: GPGTools - http://gpgtools.org
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=TBUL
-----END PGP PUBLIC KEY BLOCK-----