The OpenSCAP ecosystem provides multiple tools to assist administrators and auditors with assessment, measurement, and enforcement of security baselines. We maintain great flexibility and interoperability, reducing the costs of performing security audits.
The OpenSCAP project provides a wide variety of hardening guides and configuration baselines developed by the open source community, ensuring that you can choose a security policy which best suits the needs of your organization, regardless of its size.
Security Content Automation Protocol (SCAP) is U.S. standard maintained by National Institute of Standards and Technology (NIST). The OpenSCAP project is a collection of open source tools for implementing and enforcing this standard, and has been awarded the SCAP 1.2 certification by NIST in 2014.
In the ever-changing world of computer security where new vulnerabilities are being discovered and patched every day, enforcing security compliance must be a continuous process. It also needs to include a way to make adjustments to policies, as well as periodic assessment and risk monitoring. The OpenSCAP ecosystem provides tools and customizable policies for a quick, cost-effective and flexible implementation of these processes.
Leaving your systems with unpatched vulnerabilities can have a number of consequences, ranging from embarrassment to heavy damage when a vulnerability is exploited by an attacker. A timely inspection of software inventory that identifies vulnerabilities is a must for any organization in the 21st century. The OpenSCAP project provides tools for automated vulnerability checking, allowing you to take steps to prevent attacks before they happen.
Government agencies and their contractors are often required by law to implement cybersecurity programs and policies. Under the U.S. Federal Information Security Management (FISMA) Act, government agencies are required to implement SCAP protection, and similar laws apply in many other countries as well. We provide an efficient and cost-effective way to implement these requirements.
Continue
Businesses, no matter their size, are increasingly concerned with information security due to a growing number of data breaches and other security-related incidents. We understand that each business is different and has different data to protect. The OpenSCAP project offers flexibility and allows businesses to leverage years of government experience in computer security.
Continue
We believe that security is best done in the open. Open source development results in more scrutiny and allows community members to contribute without being held back by red tape, patents and secrets.
That is why all the projects under the OpenSCAP umbrella are 100% open source.
Continue
