They are a legit company so far as I can tell they are an industry guidance organization and they help with security against malware and software issues.
Yes I discovered several security vulnerabilities using AMTSO to test my cybersecurity responses to phishing and other malware threats online using the free tools section of the site. Great resource.