Tool and Usage
Tools to assist administrators and auditors with assessment, measurement and enforcement of security baselines
The OpenSCAP project provides a wide variety of hardening guides, configuration baselines, and tools to test for vulnerabilities and configuration issues. It uses SCAP as the protocol to store the underlying data.
Usage and audience
OpenSCAP is commonly used for security assessment or vulnerability scanning. Target users for this tool are pentesters and security professionals.
- OpenSCAP is written in C
- Command line interface
- Uses CWE name convention
Tool review and remarks
The review and analysis of this project resulted in the following remarks for this security tool:
- + More than 25 contributors
- + The source code of this software is available
- + Supported by a large company
Supported operating systems
OpenSCAP is known to work on Linux.
|Latest release||1.2.16 [2017-11-14]|
|Last updated||Feb. 12, 2018|
|OpenSCAP GitHub project|