Vasion was made aware that Pierre Kim identified security vulnerabilities for a set of features. He responsibly reported them to Vasion prior to public disclosure, allowing us to investigate and issue updates to address the confirmed issues. We remediated the majority of the vulnerabilities by January 2025. There were three remaining vulnerabilities in April 2025, but now all the Docker recommended patches have been applied.
Vasion maintains both ISO 27001 and SOC 2 certifications, and is currently in the process of achieving FedRAMP Authorized status with a current 'In Process' Listing—one of the most rigorous cloud security standards—a designation earned nationally by only .001% of cloud providers/by fewer than 350 SaaS organizations. This achievement reflects an ongoing commitment to robust security practices, continuous monitoring, and third-party validation.
We appreciate Pierre Kim's contributions, his dedication to security, and the opportunity to clarify resolved issues.
Customers with questions or concerns are encouraged to contact Vasion directly. And as always, users may reference Vasion Security.