Unpublish Policy

Note: This is a boilerplate document. It must be reviewed by legal counsel.

To keep the ecosystem stable and prevent broken dependencies for other users, SigmaShake limits the removal of rulesets from the SigmaShake Hub after they have gained public traction.

The Hub has no self-service unpublish action and no deprecate flag today. Removal is handled by request:

1. Removal request: To remove a ruleset or a ruleset version, send a request to [email protected] (or open a ticket at support.sigmashake.com). A person reviews each request by hand. No response time is promised.
2. Permanent removal: Removal of a version that others use is generally only permitted for security incidents, accidental secrets disclosure, or legal reasons.
3. Unmaintained rulesets: If a ruleset is no longer maintained, say so in the ruleset description and tell the Hub operators by the same channel. A deprecate flag is not available.

Dated note 2026-10-14: this page replaces earlier text that described a 7-day self-service grace period and a "deprecate" flag. The Hub does not implement them.