Security Audit Working Group

Perform a security audit on k8s with a vendor and produce as artifacts a threat model and whitepaper outlining everything found during the audit.

Meetings

• Regular WG Meeting: Mondays at 13:00 PT (Pacific Time) (weekly). Convert to your timezone.

Organizers

• Aaron Small (@aasmall), Google
• Joel Smith (@joelsmith), Red Hat
• Craig Ingram (@cji), Salesforce

Contact

• Slack
• Mailing list

Request For Proposals

The RFP will be open between 2018/10/29 and 2018/11/30 and has been published here.

Vendor Selection

The RFP is now closed. The working group selected Trail of Atredis, a collaboration between Trail of Bits and Atredis Partners to perform the audit.

Mailing Lists

• Sensitive communications regarding the audit shouls be sent to the private variant of the mailing list.