LSE top 100LSE top 100OpenSCAP (73)OpenSCAP (73)

Tool and Usage

Tools to assist administrators and auditors with assessment, measurement and enforcement of security baselines

Screenshot for OpenSCAP tool review


The OpenSCAP project provides a wide variety of hardening guides, configuration baselines, and tools to test for vulnerabilities and configuration issues. It uses SCAP as the protocol to store the underlying data.

Usage and audience

OpenSCAP is commonly used for security assessment or vulnerability scanning. Target users for this tool are pentesters and security professionals.


  • OpenSCAP is written in C
  • Command line interface
  • Uses CWE name convention

Tool review and remarks

The review and analysis of this project resulted in the following remarks for this security tool:


  • + More than 25 contributors
  • + The source code of this software is available
  • + Supported by a large company


Supported operating systems

OpenSCAP is known to work on Linux.

OpenSCAP alternatives

All alternatives for OpenSCAP

Found an improvement? Become an influencer and submit an update.
Project details
Latest release1.2.16 [2017-11-14]
Last updatedFeb. 12, 2018

Project health

This score is calculated by different factors, like project age, last release date, etc.


GitHub iconOpenSCAP GitHub project
Twitter icon@openscap

Compare OpenSCAP with other tools

Related terms