Mitrecaldera
Emulate Coverage Operate Detect Plugins Report Launch operation
How We Publish

Editorial Policy

Our standards for accurate sourcing, responsible cybersecurity publishing, transparent corrections, commercial independence, and meaningful updates.

Last updated: July 26, 2026

1. Purpose and editorial mission

MITRECaldera.com aims to help readers understand adversary emulation, defensive validation, and the Caldera ecosystem through clear, practical, and responsibly framed content. Our editorial process is designed to make technical information useful without presenting assumptions as facts or ignoring the risks that accompany cybersecurity tools.

We serve a mixed audience that includes learners, administrators, defenders, red and purple teams, researchers, and decision-makers. Articles should explain the intended audience, relevant context, important prerequisites, and limits of the guidance whenever those details materially affect safe use.

2. Core editorial principles

01

Accuracy

Material technical claims should be supported by current, reliable evidence and should distinguish confirmed facts from interpretation.

02

Clarity

Content should explain necessary terminology, assumptions, and outcomes in language appropriate to the expected reader.

03

Responsible use

Security guidance should emphasize authorization, scope, isolation, least privilege, monitoring, data protection, and recovery.

04

Transparency

Significant conflicts, commercial relationships, limitations, corrections, and material updates should be clearly disclosed.

3. Research and source standards

We prefer primary sources for claims about software behavior, version requirements, security issues, governance, licensing, standards, or project history. Depending on the subject, these may include official documentation, maintained repositories, release notes, source code, security advisories, standards organisations, academic research, and direct statements from the responsible project or vendor.

Secondary sources can add useful analysis, practical experience, or broader context, but they should not replace an available primary source for a precise technical claim. Anonymous posts, unverified screenshots, copied articles, and automatically generated summaries are not treated as sufficient evidence on their own.

  • Version-specific claims should identify the relevant version or review date where practical.
  • Quoted or closely paraphrased material should be attributed and kept within reasonable limits.
  • Statistics should include the source, measurement period, and important methodology limitations.
  • Download links should favour authentic project or vendor sources instead of unverified mirrors.
  • Security advisories should be checked against authoritative records and updated information.

4. Editorial workflow

Stage What we check Expected outcome
Topic selection Reader need, relevance, risk, available evidence, and duplication A clear purpose and intended audience
Research Primary sources, recent changes, licensing, advisories, and competing explanations An evidence base with known limitations
Drafting Structure, terminology, assumptions, responsible-use context, and practical value A useful draft that does not overstate certainty
Review Technical consistency, citations, security implications, clarity, grammar, and disclosure A publishable page with appropriate safeguards
Maintenance Broken links, changed versions, advisories, factual corrections, and reader feedback An updated, corrected, or clearly archived page

5. Responsible cybersecurity publishing

The educational value of technical detail must be balanced against foreseeable harm. We do not publish content for the purpose of enabling unauthorized access, credential theft, destructive activity, evasion, privacy abuse, or attacks on real targets. Technical material should be framed for authorized labs, defensive validation, research, or incident-response preparation.

When a detail could materially increase immediate abuse risk, editors may remove operationally unnecessary data, delay publication, use a safer proof of concept, focus on detection and mitigation, or refer readers to coordinated official disclosure. This judgment considers exploit maturity, affected population, patch availability, current abuse, and the defensive value of the detail.

Safety context is part of accuracy

Commands should not be presented as universally safe. Relevant permissions, scope, destructive effects, persistence, cleanup, and environment assumptions should be explained when they can change the outcome.

6. Testing and technical examples

When an article is based on hands-on testing, we aim to identify relevant environmental details such as platform, version, deployment method, dependencies, permissions, and important configuration differences. Results from a limited test environment are not presented as proof of universal behavior.

Code and commands should be reviewed for obvious errors and foreseeable hazards, but readers must still inspect and test them independently. We do not promise that an example is secure, production-ready, maintained, or compatible with future releases.

7. AI-assisted work

Automated tools may assist with research organisation, transcription, grammar, summaries, code review, or drafting. AI output is not treated as a factual source. Material claims should be checked against reliable evidence, and a human editor remains responsible for the final decision to publish.

Content should not invent hands-on testing, authorship credentials, quotations, sources, vulnerabilities, or project relationships. When AI assistance is material to a page and disclosure would help a reasonable reader evaluate the work, an appropriate note should be included.

8. Corrections and updates

Readers can request a correction by sending the page URL, the specific statement, the proposed correction, and a reliable supporting source. We review the substance of a request regardless of whether the sender is named in the article.

Minor spelling, formatting, and clarity edits may be made without a separate correction note. Material factual errors, misleading omissions, or changes that significantly alter the conclusion should be corrected promptly and may receive an editor’s note. A page’s “last updated” date should change when its substance has been meaningfully reviewed or revised—not for a purely cosmetic edit.

Request a correction

Email contact@buytextlinks.com with “Editorial Correction” in the subject line.

9. Commercial relationships and editorial independence

Advertising, sponsorships, affiliate links, paid placements, product access, or other benefits can create real or perceived conflicts. Material relationships should be disclosed clearly and close to the relevant recommendation or coverage. Sponsored content should be distinguishable from independent editorial content.

Payment does not guarantee positive coverage, suppress a necessary correction, or grant an advertiser control over unrelated editorial conclusions. Contributors should disclose relationships that a reasonable reader would consider relevant.

10. Contributors and conflicts

Contributors are expected to submit original work, attribute sources, disclose conflicts, avoid fabricated experience, respect confidentiality, and follow responsible security practices. Plagiarism, undisclosed paid advocacy, manipulated evidence, and invented quotations are not acceptable.

Guest submissions may be edited, fact-checked, rejected, corrected, or removed. Publication does not mean that the Website endorses every outside opinion or third-party tool mentioned by a contributor.

11. Independent-site disclosure

No official affiliation

MITRECaldera.com is independent and is not owned, operated, sponsored, approved, or endorsed by The MITRE Corporation, the Apache Software Foundation, or the official Caldera project.

References to MITRE, ATT&CK, Caldera, Apache, and associated marks are descriptive. Official project resources remain the authoritative source for releases, governance, licenses, and security notices.

12. Editorial contact

Questions about this policy, corrections, or editorial standards may be sent to contact@buytextlinks.com .