Skip to content

TLP

The Traffic Light Protocol (TLP) is a system for classifying sensitive information. This spec is based on FIRST's TLP 2.0 and was officially adopted for use by Maple Flask on 2026-07-01.


There are four colors (or traffic lights).

TLP:RED - Personal for named recipients only.

In the context of a meeting, for example, RED information is limited to those present at the meeting. The distribution of RED information will generally be via a defined list and in extreme circumstances may only be passed verbally or in person.

TLP:AMBER - Limited distribution.

The recipient may share AMBER information with others within their organization and their clients, but only on a ‘need-to-know’ basis. The originator is expected to specify the intended limits of that sharing.

TLP:AMBER+STRICT - Introduced in TLP version 2.0, restricts sharing to the organization only.

TLP:GREEN - Community wide.

Information in this category can be circulated widely within a particular community. However, the information may not be published or posted publicly on the Internet, nor released outside of the community. The originator is expected to define the community for which the document is intended.

TLP:WHITE or TLP:CLEAR - Unlimited.

Subject to standard copyright rules, CLEAR/WHITE information may be distributed freely, without restriction.