Monday, June 23, 2014

SCAP Compliance Checker

A useful tool for those of us in the DoD that need to verify compliance.

  • Performs compliance scanning using SCAP content
  • Performs vulnerability scanning using OVAL content
  • Performs manual interview checks using OCIL content
  • Creates XCCDF XML results
  • Creates OVAL XML results
  • Creates ARF XML results
  • Creates Cyberscope Autofeed XML results
  • Creates HTML and text based single computer reports
  • Creates HTML and spreadsheet based multi-computer summary reports
  • Allows for installation of custom SCAP and OVAL content
  • Allows for automatic downloading of updated patch content from Internet/Intranet
  • Allows for organizational deviations
  • Allows for organizationally defined compliance thresholds
  • Has graphical and command line interfaces
  • Native executables per platform (no runtime requirements such as Java)


http://www.public.navy.mil/spawar/Atlantic/ProductsServices/Pages/SCAP.aspx