License
Apache-2.0 with the Commons Clause
HBS Tool is licensed under the Apache License 2.0 with the Commons Clause, held by PotenFYR Studios. The repository's LICENSE file is authoritative - this page is a plain-language summary, not legal advice.
In short
01
What that means in practice
| Use | Status | Why |
|---|---|---|
| Fork, modify, self-host | Allowed | Apache-2.0 grants apply exactly as written. |
| Commercial use inside your company | Allowed | Internal use is not resale. |
| Client engagements using HBS as a tool | Allowed | HBS is not the product being sold. |
| Derivatives that add their own value | Allowed | Additive products are fine. |
| Selling the software itself | Not allowed | The Commons Clause restricts resale of the software. |
Commons Clause is a narrow condition on top of Apache-2.0, not a switch to a non-free license: every Apache-2.0 grant (use, modification, distribution, patent grant, contributions) applies exactly as written. Only reselling the software itself is off limits. Internal use at your company, client engagements where HBS is a tool rather than the product being sold, and commercial derivatives that add their own value all remain fully permitted.
See NOTICE.md for attribution details: referenced standards (CIS Benchmarks, NIST SP 800-53, ISO/IEC 27001, PCI-DSS) are the property of their publishers and are referenced for traceability, never redistributed. All product names, logos, brands and trademarks belong to their respective owners.
Questions about licensing? Reach the maintainers via GitHub issues or potenfyr.in.