Security configuration scanner supporting SCAP content, CIS benchmarks, DISA STIGs, and PCI DSS auditing workflows.
License
LGPL-2.1
Open source
Version
1.3
Audit district servers against CIS benchmarks and generate machine-readable compliance reports. Proves to auditors and cyber insurance carriers that systems meet hardening standards — automatically, not manually.
OpenSCAP is an open-source implementation of the Security Content Automation Protocol (SCAP). Maintained by Red Hat with community contributions.
Education relevance: Automated compliance auditing against CIS benchmarks and DISA STIGs. Proves systems meet hardening standards with machine-readable reports — critical for cyber insurance and state security mandates.
Visit OpenSCAP Project / Red Hat →Ask which stack version includes this application and whether current lifecycle evidence is available for a pilot.
Launch Pilot →Enterprise security monitoring — threat detection, compliance reporting, endpoint protection.
Single sign-on and identity management — one login for everything.
Automated web application vulnerability scanner — find security issues before attackers do.
Network vulnerability scanner with 100,000+ vulnerability tests and compliance checking.