Terms of Use

1. Acceptance of terms

These Terms of Use (“Terms”) govern your access to and use of STIGhub (the “Service”), operated by Beacon Cloud Solutions, Inc. (“Beacon,” “we,” “us”). By using the Service, you agree to these Terms and to our Privacy Policy. If you do not agree, do not use the Service.

2. The Service

STIGhub is a free reference tool for DISA Security Technical Implementation Guides (STIGs), NIST 800-53 controls, and related compliance content, with an AI-assisted chat helper. The Service is provided on an “as is” basis, as described in Section 6.

3. Permitted use

You may use STIGhub for personal, educational, or professional purposes, including in the course of paid compliance work such as consulting engagements, assessments, and internal security programs. Use of STIGhub on a paid engagement is permitted; sale of STIGhub itself is not.

You may not:

• Resell, sublicense, or offer paid access to the Service itself, except pursuant to a separate written agreement with Beacon.
• Scrape, crawl, or bulk-extract the Service's content to build or train a competing product, service, or dataset. Authorized use of STIGhub's documented public API, within its published rate limits and terms, is permitted.
• Mirror, redistribute, or host a copy of the Service or a substantial portion of its content for offline or air-gapped use, except pursuant to a separate written agreement with Beacon. Licensed offline and air-gapped deployments are available for classified or otherwise network-isolated environments; contact us to discuss.
• Reverse engineer, decompile, or attempt to derive source code from the Service, except to the extent this restriction is prohibited by applicable law.
• Remove, obscure, or alter any attribution, branding, or proprietary notices on the Service or on content exported from it.
• Use the Service to transmit content that is unlawful, infringing, malicious, or that violates a third party's rights. In particular, do not submit classified, controlled-unclassified (CUI), export-controlled, or personally identifying information to the chat assistant without a lawful basis.
• Circumvent rate limits, access controls, or other security measures, or probe the Service for vulnerabilities outside of a coordinated-disclosure process.
• Use the Service in a way that imposes an unreasonable load on our infrastructure, including using it as the target of denial-of-service or load testing.

For bulk data use beyond the public API, offline or air-gapped deployments, OEM or white-label integrations, or any other use not described above, contact info@beaconcloudsolutions.com to discuss licensing.

4. AI-generated content

The Service includes a chat assistant powered by a large language model. Output from this feature is generated by an AI system and may be inaccurate, incomplete, outdated, or inconsistent with authoritative sources.

AI-generated output is not legal, regulatory, or compliance advice and is not a substitute for review by a qualified human. You are solely responsible for independently verifying any AI-generated content before relying on it in an assessment, authorization package, contract deliverable, or other work product.

5. Accuracy of reference data; no government affiliation

STIGhub mirrors publicly available data from DISA, NIST, and related sources. We make reasonable efforts to keep this data current, but we make no warranty that it is accurate, complete, or up to date. Always consult the authoritative source (e.g., public.cyber.mil, nvd.nist.gov) for official compliance decisions.

STIGhub is not affiliated with, endorsed by, or sponsored by DISA, the Department of Defense, NIST, or any U.S. government agency. “DISA,” “STIG,” and related terms are used for descriptive purposes only.

6. Disclaimer of warranties

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR ACCURACY. WE DO NOT WARRANT THAT THE SERVICE, OR ANY AI-GENERATED OUTPUT OR REFERENCE DATA DELIVERED THROUGH IT, WILL MEET YOUR REQUIREMENTS, BE UNINTERRUPTED, OR BE ERROR-FREE.

7. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, BEACON CLOUD SOLUTIONS, INC. AND ITS OFFICERS, EMPLOYEES, AND CONTRACTORS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUES, DATA, OR GOODWILL, ARISING OUT OF OR RELATED TO YOUR USE OF THE SERVICE — EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

OUR TOTAL AGGREGATE LIABILITY UNDER THESE TERMS WILL NOT EXCEED THE GREATER OF ONE HUNDRED U.S. DOLLARS ($100) OR THE AMOUNT YOU HAVE PAID TO US FOR THE SERVICE IN THE TWELVE MONTHS PRECEDING THE CLAIM.

Nothing in this section limits liability for gross negligence, willful misconduct, fraud, or any other liability that cannot be limited or excluded under applicable law.

8. Indemnification

You agree to indemnify and hold harmless Beacon Cloud Solutions, Inc. and its officers, employees, and contractors from any claim, demand, loss, or expense (including reasonable attorneys' fees) arising out of or related to (a) your use of the Service, (b) your violation of these Terms, or (c) your violation of any third-party right or applicable law.

9. Third-party services

The Service uses or links to third-party services, including Anthropic for AI features, Google for analytics, and public government data sources such as DISA and NIST. We are not responsible for third-party services or their terms. Your use of those services is governed by their own policies.

10. Termination

We may suspend or terminate your access to the Service at any time, with or without notice, for any reason — including a violation of these Terms. You may stop using the Service at any time. The sections of these Terms that by their nature should survive (including intellectual property, disclaimers, limitation of liability, indemnification, and governing law) will survive termination.

11. Changes to the Service and to these Terms

We may modify, suspend, or discontinue any part of the Service at any time without notice. We may revise these Terms from time to time; revisions take effect when posted. Your continued use of the Service after revisions are posted constitutes acceptance of the updated Terms.

12. Governing law

These Terms are governed by the laws of the State of California, without regard to its conflict-of-laws principles. Any dispute arising out of or relating to these Terms or the Service will be resolved in the state or federal courts located in San Diego County, California, and you consent to the exclusive personal jurisdiction of those courts.

13. Contact

Questions about these Terms? Contact us at:

Beacon Cloud Solutions, Inc.
10801 Thornmint Rd, Suite 200
San Diego, CA 92127
info@beaconcloudsolutions.com