R1-09 Inbound and partner demand log

Supports slide 2, 3, 9.

Slides 2, 3 and 9 say the urgency comes from buying behaviour, not a regulatory date. This is the record of who came to us without being asked, and the publisher at our table. I’ve named organisations, not people.

Inbound through the contact form, since 1 May 2026

Spam, tests and the 3 to 7 Aug smoke run are left out.

Date	From	What they wanted	Answered
7 May	Individual	A Solaris 8 STIG	Same day
1 Jun	Candela Medical	Severity gauge display	Same day
11 Jun	A DoD user (mail.mil)	Enhancement request: F5OS STIGs for F5 R-series and VELOS	Same day
14 Jul	Individual	Trouble verifying email	Same day
31 Jul	US Department of State	Trouble verifying email	Same day
13 Aug	Visa	Pricing details	After 7 days. The reply was in spam.
28 Aug	Individual	Windows 11 STIG out of date	No reply found

Eight real inquiries in the record; six answered the same day. This table lists the seven I could match line by line.

The Air Force

• 13 Aug 2026: the 707th ISS (us.af.mil) signed up for the STIGViewer newsletter on its own.
• June 2026: several us.af.mil users created STIGViewer accounts. I followed up by email on 15, 18 and 19 Jun.
• Sep 2026: an introduction to Nellis Air Force Base came through a contact at the City of North Las Vegas. That one was introduced, not unprompted.

Not yet evidenced: an Air Force request to buy. The record shows Air Force users and a unit signing up unprompted, not a purchase inquiry.

Named visitors on the pricing page, week of 9 Sep 2026

Fourteen person-level alerts fired. Eight were people at named organisations, including the Department of Homeland Security, the Georgia Department of Public Health, Vantor, Critical Software, Azimuth, Kortext and Strike Graph. I wrote to each of them by hand.

The publisher at the table

• Sep 2025: DoD and DISA instructed the handover of STIGViewer to MoxyWolf. Michael was made owner on 26 Sep 2025; the repository moved by 1 Oct 2025.
• 31 Jul 2026: DISA agreed yearly pricing terms with us. The terms and figures are confidential under the agreement. See the R6-05 disclosure note.

Partners asking to resell

Strike Graph, DTA, Policycode and Sentient. Stages, dates and output are in R2-03.

Sources

• STIGViewer contacts table (Supabase project augnxtezgrzdcmpdmjnh), rows since 1 May 2026, queried 17 Oct 2026.
• Gmail: 707 ISS newsletter signup notification, 13 Aug 2026; account follow-ups to us.af.mil addresses, 15 to 30 Jun 2026; Nellis introduction thread, 8 to 17 Sep 2026.
• Weekly check-in, 9 Sep 2026 (project doc): pricing-page alerts.
• Capstone Facts Reconciled, 17 Oct 2026: inbound response times, handover record, DISA pricing terms.