Devseis Endpoint Auditor
Copyright 2026 Devseis

This product includes software developed by Devseis (https://huggingface.co/Devseis).
If you redistribute it or build on it, keep this NOTICE file and credit
"Devseis Endpoint Auditor" in your documentation, as required by the Apache License 2.0, section 4(d).

Licensing
- Source code: Apache License 2.0 (LICENSE).
- Data and content: Creative Commons Attribution 4.0 International (LICENSE-DATA):
  catalog/, library/, baseline.conf, organisational.conf, docs/, synthetic data,
  training data and the vulnerability bundle.
  Attribution: "Devseis Endpoint Auditor by Devseis, CC BY 4.0".

Third-party data in the vulnerability bundle
- OSV.dev data (Ubuntu, Debian, Red Hat, AlmaLinux, Rocky Linux), CC BY 4.0.
- This product uses data from the NVD API but is not endorsed or certified by the NVD.
- CISA Known Exploited Vulnerabilities catalog, CC0 1.0.
- EPSS scores by FIRST.org.

Standards
- The catalog refers to ISO/IEC 27001:2022 Annex A controls by number and short title only;
  no ISO text is reproduced. ISO/IEC 27001 is a trademark of ISO/IEC. GDPR and EU AI Act
  references cite EUR-Lex (Commission Decision 2011/833/EU on reuse of Commission documents).
- The base language model, Qwen2.5-0.5B-Instruct, is licensed under Apache 2.0 by the Qwen team, Alibaba Cloud.