Kryptós CronOS incorporates references to publicly licensed third-party frameworks and standards. All original platform code, curriculum design, stage scenarios, and content not listed below are proprietary to Kryptós CronOS and protected by copyright.
The MITRE Corporation
The MITRE ATT&CK® epoch uses the ATT&CK® knowledge base as a framework for its tactic and technique curriculum. MITRE ATT&CK® is a registered trademark of The MITRE Corporation.
The MITRE Corporation
The MITRE ATLAS™ epoch is based on the ATLAS knowledge base for adversarial machine learning threats. MITRE ATLAS™ is a trademark of The MITRE Corporation.
OWASP Foundation, Inc.
The OWASP LLM epoch is adapted from the OWASP Top 10 for Large Language Model Applications. OWASP® is a registered trademark of the OWASP Foundation, Inc.
The MITRE Corporation / NIST
CVE missions reference publicly disclosed CVE identifiers and vulnerability descriptions from the National Vulnerability Database (NVD). CVE® is a registered trademark of The MITRE Corporation. NVD data is provided by NIST.
National Institute of Standards and Technology (U.S. Government)
Quantum Era modules reference NIST post-quantum cryptography standards (FIPS 203, 204, 205) and NIST Special Publications (SP 800-137, 800-207, 800-30, 800-34, 800-53, 800-161). Tech Audit modules reference NIST SP 800-series control frameworks. NIST publications are works of the U.S. Government and are in the public domain.
ISACA
Tech Audit modules reference ISACA® frameworks including COBIT® 2019 control objectives and the CISA® and CRISC® certification domains. ISACA®, COBIT®, CISA®, and CRISC® are registered trademarks of ISACA. No proprietary ISACA content is reproduced verbatim; references are descriptive and educational.
OWASP Foundation, Inc.
Tech Audit 2 stages map directly to OWASP API Security Top 10 2023 categories including BOLA (API1), Broken Authentication (API2), and others. OWASP® is a registered trademark of the OWASP Foundation, Inc. Content is adapted for educational use under CC BY-SA 4.0. The ShareAlike clause applies to any redistribution of adapted OWASP content.
Center for Internet Security, Inc.
Tech Audit modules reference CIS Benchmarks™ for Docker, Kubernetes, and AWS (CIS AWS Foundations Benchmark™). CIS Benchmarks™ are trademarks of the Center for Internet Security, Inc. References are descriptive and educational; no benchmark content is reproduced verbatim.
PeopleCert International Ltd.
Tech Audit 1 references ITIL® v2 and v4 service management framework concepts. ITIL® is a registered trademark of PeopleCert International Ltd. References are descriptive and educational; no ITIL® content is reproduced verbatim.
PCI Security Standards Council, LLC
Tech Audit 1 references PCI DSS® (Payment Card Industry Data Security Standard) requirements. PCI DSS® is a registered trademark of PCI Security Standards Council, LLC. References are descriptive and educational; no PCI DSS® specification text is reproduced verbatim.
Anthropic PBC
Tech Audit 3 stages are built around Claude™ tool-use workflows and Model Context Protocol (MCP) server integration patterns. Claude™ is a trademark of Anthropic PBC. MCP is an open protocol published by Anthropic. References are based on Anthropic's publicly available documentation. No proprietary Anthropic content is reproduced verbatim.
HashiCorp, Inc.
Tech Audit 3 references HashiCorp Vault® as a secrets management solution in the context of cloud security workflows. HashiCorp Vault® is a registered trademark of HashiCorp, Inc. References are descriptive and educational; no HashiCorp documentation is reproduced verbatim.
OASIS Open
Tech Audit 4 references STIX™ 2.1 (Structured Threat Intelligence eXpression) and TAXII™ 2.1 (Trusted Automated eXchange of Intelligence Information) as threat intelligence sharing standards. STIX™ and TAXII™ are trademarks of OASIS Open. These are open standards freely available for implementation.
Wikimedia Commons contributors
Illustrative photographs on stage briefing pages are sourced from Wikimedia Commons under their respective free licenses (public domain or Creative Commons) and self-hosted. The Debate & Speech track uses, among others, the Pnyx (Athens), and busts/portraits of Aristotle, Cicero, and Demosthenes; the House of Commons; the Bodleian Library; and anatomical illustration. Each file remains under the license stated on its Commons page.
Photos on the Race Through Space stages are from Wikimedia Commons. NASA/NOAA images are in the public domain; others are under Creative Commons. Each is credited to its source below.
Photos on the EV & vehicle-security stages are from Wikimedia Commons under free licenses and self-hosted, credited to each author below.
Photos on the robotics stages are from Wikimedia Commons (NASA/U.S. Navy public domain + Creative Commons), self-hosted and credited to each author below.
Photos on the Flag Football stages are from Wikimedia Commons (public domain + Creative Commons), self-hosted and credited to each author below.
Photos on the OT / ICS-SCADA stages are from Wikimedia Commons (public domain + Creative Commons), self-hosted and credited to each author below.
Real Milan and Italy scenes matched to each lesson — the Galleria, the Duomo, a historic tram, gelato, risotto, Chianti, San Siro, the Navigli — from Wikimedia Commons and the public domain, self-hosted and credited below.
Real Paris and France scenes matched to each lesson — café terraces, street markets, the Métro, the Louvre, a boulangerie, the Champagne vineyards, a Minitel — from Wikimedia Commons and the public domain, self-hosted and credited below.
The great historical tapestries (Bayeux, the Lady and the Unicorn, Chinese kesi, the Paracas Textile, the Barberini and millefleur works) plus looms, yarn, and weaving — from Wikimedia Commons and public-domain museum collections, self-hosted and credited below.
Real photos of the physical hardware behind each concept (filaments, transistors, core memory, chip dies, oscilloscopes, DRAM, data centers), from Wikimedia Commons under free licenses and the public domain. Self-hosted and credited below; the most abstract stages keep the generated cover.
Photos on the second vehicle-security epoch are from Wikimedia Commons under free licenses, self-hosted and credited to each author below.
Photos on the onboarding track are real places from the story (Piraeus, airports, Highway 1, and the Santa Cruz & Monterey coast), from Wikimedia Commons — self-hosted and credited below.
The wonders of the ancient world — Wikimedia Commons photographs, plus public-domain engravings for the wonders that no longer stand. Self-hosted and credited below.
Photos on the second robotics epoch are from Wikimedia Commons (U.S. Navy public domain + Creative Commons), self-hosted and credited to each author below.
Photos on the second space epoch are from Wikimedia Commons. NASA images are public domain; Creative Commons images are credited to each author below.
Photos on the semiconductor-manufacturing stages are from Wikimedia Commons (public domain + Creative Commons), self-hosted and credited to each author below. Abstract steps (the silicon ingot, lithography stepper, and EUV source) keep the generated cover.
All original content — including application source code, stage scenarios, CTF challenges, quiz questions, UI design, and educational narratives — is © 2026 Kryptós CronOS. All rights reserved.
Third-party trademarks and registered marks are the property of their respective owners. Reference to any third-party framework or standard does not imply endorsement.