An open source project creating and providing SCAP security policies for various platforms – namely Red Hat Enterprise Linux 6 and 7, Fedora, Firefox, and others. The project is public domain and the policies it provides can be used freely by anyone.
(I don't feel comfortable editing this particular description as an outgoing intern).
On this page: https://www.open-scap.org/security-policies/
The current text for SSG is:
In particular, I'm not sure "public domain" is correct as SSG has a BSD-3 clause.
This appears to be the only page with this problem.