Licensing

The content and code of this site and of the auditthis.ai project are dedicated to the public domain under CC0 1.0, except the AIQT Guardrails material listed in the project's .aiqt/PIN (vendored gate scripts and the AIQT sections of CLAUDE.md and AGENTS.md), which is licensed under the Apache License 2.0.

The referenced works

This site reproduces no text from any reference. Each reference's own licence governs its use, and the reference register records the licence read from each source and the date it was read.

• CC BY-SA 4.0 references (GRC Library, Clean Language, OWASP ASVS, OWASP Top 10 for LLM Applications, OWASP SCVS, OWASP SAMM, OWASP Threat Modeling Playbook, Diátaxis, OWASP Web Security Testing Guide, OWASP AI Testing Guide, OWASP Cheat Sheet Series) are attributed by name and link in the register. The OWASP works are copyright the OWASP Foundation, Inc.; OWASP is a registered trademark of the OWASP Foundation, Inc., and the Foundation does not endorse and is not affiliated with this site.
• SLSA is published under the Community Specification License 1.0, a specification licence that differs from the open-source and Creative Commons licences of the other references.
• The DataGrail Privacy Assessment skill is distributed by its publisher under its own terms; this site only links to it.
• The CSA Cloud Controls Matrix and AI Controls Matrix are distributed by the Cloud Security Alliance under its own terms (licensing FAQ). This site links to CSA's pages and hosts no copy; the prompts use only a copy the owner supplies, and reproduce only control identifiers and titles, attributed to the Cloud Security Alliance. The owner is responsible for holding whatever licence CSA requires for their use of the output.
• Apache 2.0, MIT, CC0, and US public domain references (AIQT Guardrails, Secure Config, WGO, MITRE ATLAS, CycloneDX, CHAOSS metrics, Minimum Viable Secure Product, NIST OSCAL content, and the 5 tools) are linked with the licence recorded in the register.

This site

What the pages load and run, and what the site does and does not do, is on the disclaimer page.