TMAegis
en

Legal

How TMAegis is licensed, how its name and logo may be used, and how this website treats your data.

License: MPL-2.0

This is a plain-language summary, not legal advice. The license text in the repository is what applies.

  • You may use, copy, modify and distribute TMAegis, including commercially.
  • If you distribute modified versions of a source file, that file must stay under MPL-2.0 and its source must be available.
  • You may combine TMAegis with code under other licenses, including proprietary code, in a larger work.
  • The license includes a patent grant from contributors.
  • The license does not grant any right to the TMAegis name, logo or trademarks.

The license text is published in English only, and the English text is the authoritative version. The summary above is a courtesy translation.

Read the full license text

Trademark policy

Summary in your language

This summary is not legal advice and does not replace the English policy.

  • The names TMAegis and tmaegis and the TM Cyber-Shield logo are trademarks of the project founders. The open source license does not grant rights to them.
  • You may write about TMAegis, say that your tool works with it and run the unmodified official binaries for your own or your clients' systems without asking.
  • You may not sell or host TMAegis under its own name, use the logo on modified builds, or name a product, company, domain or repository in a confusingly similar way, without a written commercial license.
  • If you distribute a modified version commercially, remove the TMAegis name and logo, keep the license notices and say that it is based on the open source TMAegis project.
  • For anything else, such as partner programs, OEM use or marketplace listings, contact the founders and get permission in writing.

The full policy below is rendered from TRADEMARK.md in the repository. It is published in English, and the English text is the authoritative version.

TMAegis™ Trademark Policy

Last updated: October 2026

The TMAegis source code is open source under the Mozilla Public License 2.0. The brand is not. This policy explains what you can and cannot do with the name and the logo, so that the community can use TMAegis freely while users can always tell the official project from a fork or a product built on it.

1. Our marks

The following are unregistered or pending trademarks, jointly owned by the project founders, Tommy Huynh (Vietnam) and Misha Milanovic (Australia) (together, the "Founders"):

  • TMAegis™ and tmaegis (the name, including as a command, binary, package, or product name)
  • the TM Cyber-Shield logo: assets/logo.svg and assets/logo-mark.svg, and derivatives that look confusingly similar

Section 2.3 of the MPL-2.0 states that it grants no trademark rights. Nothing in the LICENSE, in the source code, or in a contribution grants you permission to use the marks other than as set out below.

2. What you may do (nominative and fair use)

You do not need permission to:

  • write tutorials, blog posts, articles, videos, courses, or talks about TMAegis;
  • state truthfully that your tool, rule pack, plugin, or integration works with or is compatible with TMAegis (for example, "Acme Plugin for TMAegis");
  • run the unmodified official binaries or the unmodified CLI inside your company or for your clients' own systems, and mention that you used TMAegis in an audit report;
  • link to the official repository and describe the project accurately;
  • refer to TMAegis by name in a benchmark comparison, security review, or academic work;
  • use the name in plain text that makes clear who the owner is, for example: "TMAegis™ is a trademark of its Founders."

Keep it truthful: do not suggest endorsement, partnership, or official certification status that does not exist, and use only as much of the brand as necessary to identify the software.

3. What you may not do

Without a written commercial licence from the Founders you may not:

  1. Redistribute commercially under the TMAegis name, whether the original or a modified build, as a paid product, appliance, bundle, or managed service.
  2. Sell or offer managed SaaS, hosted, or cloud-marketplace images (AWS, Azure, GCP, DigitalOcean, container registries, or VM marketplaces) using the TMAegis brand.
  3. Use the TM Cyber-Shield logo on forked or modified binaries, installers, packages, containers, websites, or documentation.
  4. Name a fork, product, company, domain, social account, app-store listing, package, or repository in a way that is the same as or confusingly similar to TMAegis (including tmaegis-pro, tmaegis-enterprise, TM-Aegis, TMAgeis, TMAgies, ...).
  5. Imply that your product, rule pack, or service is official, certified, or endorsed by the Founders or the TMAegis project.
  6. Register the marks, confusingly similar marks, or domain names containing them in any jurisdiction.
  7. Use the marks in a way that is misleading, disparaging, or associated with unlawful activity.

4. Forks and modified versions: rebrand requirement

You are free to fork the source code under the MPL-2.0. However, if you distribute a modified version commercially, you must:

  • remove the TMAegis name and the TM Cyber-Shield logo from the product (binary name, CLI banner, --help, desktop GUI, reports, installers, package metadata, website, and documentation), and replace them with your own distinct name and branding;
  • retain all licence notices required by the MPL-2.0 (the LICENSE file, copyright and SPDX headers, and the NOTICE file), and state clearly in your documentation that your product is derived from the open-source TMAegis project, for example: "Based on the open-source TMAegis project."

A non-commercial community fork that is clearly labelled as unofficial may retain references to the original name solely in the nominative manner described in Section 2.

5. Commercial licence and permission

If you wish to use the marks in a way not covered by this policy (for example, an official partner programme, OEM embedding, white-label/co-branded reports, or a cloud marketplace listing), please contact the Founders at contact@tmaegis.dev, by opening an issue in the official repository, or via the contact details in AUTHORS. Permission must be granted in writing.

6. Enforcement

We may request that you cease any use not permitted by this policy and transfer or cancel infringing names, domains, or marketplace listings. Our goal is always to be constructive: tell us what you are building and we will usually find a straightforward path that works for everyone.

7. Changes

We may update this policy from time to time. The latest version in the official repository applies.

TMAegis™ and the TM Cyber-Shield logo are trademarks of the project founders. All other names and trademarks are the property of their respective owners. CIS Benchmarks® is a trademark of the Center for Internet Security, Inc.

Notice

Summary in your language

  • The source code is licensed under the Mozilla Public License 2.0. The name and logo are trademarks that the license does not cover.
  • When you redistribute TMAegis or a modified version, keep the NOTICE and LICENSE files and the copyright and SPDX headers. Modified files must stay available under MPL-2.0.
  • Third-party components, including the Geist fonts embedded in the reports, keep their own licenses.
  • CIS Benchmarks and the rule text derived from them stay under the terms published by CIS. TMAegis is not affiliated with, sponsored by or endorsed by CIS.

The full text below is rendered from the NOTICE file in the repository. It is published in English, and the English text is the authoritative version.

TMAegis™ - AI-Powered Cross-Platform CIS Hardening & Compliance Engine
Copyright (c) 2026 Tommy Huynh & Misha Milanovic. All rights reserved.

LICENSE OF THE SOURCE CODE
The TMAegis source code is licensed under the Mozilla Public License, Version 2.0
(MPL-2.0). The full text is in the LICENSE file. SPDX-License-Identifier: MPL-2.0

TRADEMARKS
"TMAegis™", "tmaegis" and the TM Cyber-Shield logo (assets/logo.svg and
assets/logo-mark.svg) are proprietary trademarks of the project founders. They are NOT
covered by the MPL-2.0 licence: Section 2.3 of the MPL-2.0 grants no right to use the
names, logos or trademarks of the licensor. The rules for using them are in TRADEMARK.md.

ATTRIBUTION
Please keep this NOTICE file, the LICENSE file and the copyright and SPDX headers in
the source files when you redistribute TMAegis or a modified version of it. Modified
files you distribute must stay available under MPL-2.0 (see Section 3 of the licence).

THIRD-PARTY COMPONENTS
- Go and JavaScript/Python dependencies are used under their own licences; see go.mod,
  web-portal/package.json and ai-pipeline/pyproject.toml.
- The HTML report (as WOFF2) and the PDF report (as TrueType) embed Geist and Geist Mono, Copyright (c) 2023 Vercel, in collaboration
  with basement.studio, licensed under the SIL Open Font License 1.1. See
  internal/report/assets/fonts/LICENSE-Geist.txt.

CIS BENCHMARKS
CIS Benchmarks(R) and CIS(R) are trademarks of the Center for Internet Security, Inc.
TMAegis is not affiliated with, sponsored by or endorsed by CIS. The CIS Benchmark
documents (benchmarks/) and the rule text derived from them (titles, descriptions,
audit and remediation steps, in rules/ and rules-staging/) remain subject to the licence
terms published by CIS. Those terms are separate from, and are not replaced by, the
MPL-2.0 licence of the TMAegis source code. Check CIS's current terms before you
publish or redistribute that content.

Privacy

  • This website sets no cookies other than one that remembers your language choice.
  • There are no analytics, advertising or third-party tracking scripts.
  • Fonts and images are served from this site, not from a third party, when you browse.
  • The rule search runs on our server; search terms are not stored or logged with any personal data.
  • If you use the contact form, your message is forwarded to the founders and is not stored on this website.
  • The TMAegis software itself sends no telemetry. It only contacts services you configure, such as an AI provider or a dashboard.

CIS attribution

CIS Benchmarks and CIS are trademarks of the Center for Internet Security, Inc. TMAegis is not affiliated with, sponsored by or endorsed by CIS. Rule titles, descriptions and procedures derived from CIS Benchmarks remain subject to CIS's own terms. The benchmark documents themselves are not distributed with TMAegis or with this website; download them from CIS.