← UTIOM
UTIOM · Licensingv1.4

How UTIOM is licensed

UTIOM is free to use, and it is not public domain. The framework and the software are different things and carry different terms. This page explains both in plain language. The binding terms are in LICENSE, LICENSE-FRAMEWORK.md and LICENSE-SOFTWARE.md.

Free to use does not mean transfer of ownership. You can use UTIOM without charge for personal work, inside your own organisation, in teaching and in research. That does not make UTIOM, its methodology, its source code, its architecture, its product design or its branding yours.

What is licensed how

Framework & Book
CC BY-SA 4.0. The methodology, the Framework Book, the written pages of this site, the diagrams, and the assessment criteria, indicators and metrics as published text. Share and adapt, including commercially, with attribution and under the same licence.
Free assessment tools
Free to use. Personal use, internal organisational and business use, education, academic research, practitioner evaluation, and internal assessment and improvement. Your answers and the results you generate are yours. Nothing is transmitted — the tools run entirely in your browser.
Self-hosted software
PolyForm Internal Use License 1.0.0. The browser assessment implementation, the JavaScript, the self-hosting toolkit and the Docker packaging. Source-available for use inside your own organisation. This is not an OSI open-source licence and it does not grant redistribution rights.
Enterprise product
Proprietary. Future or commercial functionality is not granted under the free tier — for example APIs, automated evidence collection, an evidence registry, continuous assurance, integrations, benchmarking, multi-team capability, reviewer workflows, historical assessment management, enterprise reporting, access controls, and support or commercial services. Available under separate commercial terms.
Attribution
Reza Adineh / UTIOM. Where you publish results, reports, papers or presentations derived from UTIOM, cite: UTIOM — Unified Threat-Informed Operations Model by Reza Adineh — https://utiom.de

What the free tier does not grant

Except where applicable law expressly provides otherwise, the following need written permission:

Using UTIOM does not transfer ownership of UTIOM, the methodology, the source code, the software architecture, the assessment implementation, the product design, future enterprise capabilities, or UTIOM branding and trademarks. A licence to use the material does not grant permission to imply endorsement, partnership or ownership.

Material released earlier

Anything already distributed under CC BY-SA 4.0 stays available under the licence that applied to that copy when it was released. Nothing on this page revokes a licence already granted. The change is forward-looking: it separates the software from the framework content so the boundary is clear.

Commercial use

Internal organisational and business use is permitted in the free tier and needs no separate licence. For commercial redistribution, third-party hosted or managed services, white-labelling or separately offered enterprise capabilities, contact Reza Adineh through the about page.

Join the UTIOM community. Discuss, contribute evidence and share implementation experience. About the community →