Terms of Use for Accessing and Using CIS-CAT Lite

The following are the Terms of Use applicable to the limited access version of the Center for Internet Security's ("CIS's") CIS Configuration Assessment Tool, referred to as CIS-CAT Lite. By downloading and using CIS-CAT and the CIS-CAT Supporting Resources (as defined herein) (collectively, the “CIS Resources”) that are available for download for CIS-CAT Lite,  you hereby acknowledge that (a) you are authorized to accept these Terms of Use on behalf of your company or employer (collectively referred to as “You”); and (b) You hereby accept and agree to abide and be bound by these Terms of Use.  If You cannot agree to these Terms of Use, please do not complete the registration process.

CIS is making CIS-CAT Lite available to allow individuals and organizations to have access at no cost to a limited version of CIS-CAT for internal, non-commercial use, subject to the Terms of Use below.  For purposes of these Terms of Use, “internal, non-commercial use” does not include (a) use of CIS Resources on internal networks that are used for external commercial hosting; or (b) the incorporation of CIS Security Benchmarks into commercial products. The Community Version provides access to a limited number of CIS Security Benchmarks, which will be periodically updated, but may not include the most current release of any particular Benchmark.  CIS-CAT Community Version users also will not have full access to all CIS-CAT functionality.

  1. By downloading the CIS Resources, CIS hereby authorizes You to receive a free access to CIS-CAT Lite, including the following resources:
    • Access to and use of CIS-CAT, which will be limited to use of certain identified XML and OVAL Benchmark files incorporated in CIS-CAT, to analyze and score the configuration of Your internal information technology systems against the available Benchmarks and obtain a score between 1-100 for Benchmark conformity; and
    • Guides for CIS-CAT use and for modifying Benchmark XML and OVAL files for use in CIS-CAT.  The XML and OVAL guides are provided for reference purposes only to allow You to review the process for creating customized configuration policies that are derived from the Benchmarks, which requires full CIS SecureSuite Membership (the Guides and XML and OVAL Benchmark files are collectively referred to as “CIS-CAT Supporting Resources”).
  2. These Term of Use take effect when the CIS Resources are downloaded and will continue for as long as You use the CIS Resources.
  3. You agree that CIS may monitor Your use of the CIS Resources and use the data gathered in an aggregated and anonymous manner. You agree that we may use and publish such information provided that such information does not incorporate any proprietary customer information and/or identify You.
  4. Use of CIS-CAT Lite does not convey any ownership right or interest in the CIS Resources and You acknowledge that CIS owns and retains all title, right and interest in the CIS Resources. Any rights in or to the CIS Resources not expressly granted in these terms are reserved by CIS.