Privacy Policy



MITRE Engenuity, Incorporated, a technology foundation for public good (“MITRE Engenuity”) respects the privacy of its website users that request to utilize the MITRE ATT&CK® Evaluation methodologies, results, and related information for MITRE Engenuity-conducted and/or self-accessed evaluations.

This Privacy Policy explains the types of information collected by MITRE Engenuity from website visitors (“User”) or that you provide to MITRE Engenuity through other means, such as via e-mail and web forms, and how MITRE Engenuity uses, shares, protects, and retains that information (collectively “Site”). By visiting the Site, you understand and agree to terms outlined in this Privacy Policy.

Information Collected from Cookies on Web Traffic Reporting and Content Tools

"Cookies" are data that may be sent to your web browser and stored on your computer. Most web browsers can be configured not to accept cookies, or to notify you if a cookie is sent to you. If you wish not to have cookies set during your visit to this Site, you can disable them in your web browser.

The Site is hosted on GitHub®. MITRE Engenuity and GitHub use a free third-party software service called Google Analytics® to capture and analyze non-personally identifiable website usage information.

MITRE Engenuity logs all accesses and the following information is recorded for each Site user: IP address, date and time of access, the requested URL, the referring URL (if provided by the Web browser), and the browser type (if provided by the Web browser). The IP address and its associated domain name (if any) are used to determine broad demographic information. The IP address may be used to track how users navigate through the Site.

MITRE Engenuity additionally collects User-entered keyword search strings to gauge User interest in specific types of vulnerability information. Each access of an individual Site entry or candidate page is used to gauge User interest. This information does not identify you personally. MITRE Engenuity may store such information, or it may be included in databases owned and maintained by our service providers.

For specific information about GitHub’s collection and use of information collected from Cookies on web traffic reporting and content tools, please review GitHub’s Terms of Use and Privacy Policy at https://docs.github.com/en/github/site-policy.

Information Collected from User Subscriptions, E-mail, and Web Forms

Information that User subscribers may provide, such as company name, location, or job function, is used to determine broad demographic and non-personally identifiable information regarding the types of users of these mailing lists. User subscribers are not required to provide this information. MITRE Engenuity may provide broad non-personally identifiable demographic information to other organizations.

MITRE Engenuity evaluations related mailing lists that are sponsored by MITRE Engenuity use commercially reasonable efforts to prevent attackers from identifying the subscribers to such mailing lists.

Any User personal information provided to MITRE Engenuity for inclusion on subscription mailing lists for MITRE Engenuity evaluations will be governed under the MITRE Engenuity privacy policy, mitre-engenuity.org/privacy.

Users may contact MITRE Engenuity electronically, via info@mitre-engenuity.org. MITRE Engenuity may share the information that you provide to us via e-mail within the corporation to respond to your queries, but we do not provide information to anyone outside of the corporation unless required by law to do so.

Information Collected from Third Party Software and Media Sites

When Users visit the Site, Users may link to third party software and/or media sites when they link to another party's website. MITRE Engenuity does not collect any information that may be collected by that third party; however, information you supply to that third-party software may be collected and/or used by that party. For information about that third party's privacy policy, please see their respective website.

Changes to Our Privacy Policy

The Site may change from time to time. As a result, at times it may be necessary for us to make changes to this Privacy Policy. Accordingly, MITRE Engenuity reserves the right to update or modify this Privacy Policy at any time and from time to time without prior notice. Please review this policy periodically, and especially before you provide any information. Your continued use of the Site after any changes or revisions to this Privacy Policy shall indicate your agreement with the terms of such revised Privacy Policy.