Licenses & Attribution

ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. CyberPathIQ uses ATT&CK technique identifiers and tactic categories to map career paths to the threat landscape.

Occupational Employment and Wage Statistics (OEWS) data provides median salary figures for cybersecurity-related occupations. BLS data is produced by the U.S. federal government and is in the public domain. CyberPathIQ is not affiliated with or endorsed by the Bureau of Labor Statistics.

The Occupational Information Network (O*NET) provides skill profiles, knowledge requirements, and work context data for cybersecurity roles. O*NET is sponsored by the U.S. Department of Labor, Employment and Training Administration. CyberPathIQ is not affiliated with or endorsed by the Department of Labor.

The National Vulnerability Database is the U.S. government repository of vulnerability management data. CyberPathIQ uses NVD data for scenario exercises and threat intelligence briefings. NVD is maintained by NIST and is in the public domain.

CyberPathIQ's RIASEC career personality assessment uses items derived from the International Personality Item Pool, a public-domain collection managed by the Oregon Research Institute. IPIP items are freely available for scientific and commercial use without permission or fees. Reference: Goldberg, L. R., et al. (2006). The International Personality Item Pool and the Future of Public-Domain Personality Measures.

CyberPathIQ is built with open source technologies including Next.js (MIT), React (MIT), Tailwind CSS (MIT), Drizzle ORM (Apache 2.0), tRPC (MIT), and others. Full dependency licenses are available in the project's package-lock.json.