What brings you to ATR?
Find the row closest to why you are here. Each one links to two pages.
I want to integrate ATR
Load the rules into your scanner, gateway or SIEM. Then pick a lane by how much you want blocked.
I want to write a rule or report a false positive
Send a rule, a bypass or a false positive. Every rule goes through the same quality gates before it merges.
I am doing procurement or an audit
See what a conforming engine has to do, and how the rules map to the frameworks you report against. ATR wrote those mappings itself. They are not endorsements.
I want to cite ATR
Cite the specification by version and DOI. The version you cited stays reachable after the standard moves on.
I want to see how ATR is governed
Who maintains ATR and how a change gets merged. Also how mistakes get corrected, and how seats on the steering committee are filled.
I represent a government or standards body
ATR is a rule format under the MIT license, tied to no vendor. Any country or organization can adopt it, audit it or fork it.