OpenSCAP

What it is

A NIST-certified SCAP 1.2 toolkit that runs OVAL and related content against a system. Operators use it to check configuration baselines and known vulnerability definitions on Linux.

What it helps with

- Evaluating SCAP content on Linux hosts
- Checking configuration baselines for compliance
- Scanning for vulnerability definitions shipped as OVAL
- Automating recurring compliance evidence collection

Who it's for

Compliance engineers and Linux administrators who need SCAP-based checks.

Worth knowing

The project documents Linux deployments. Microsoft Windows support is officially void as of 2022.

Is it only for Red Hat systems?
No, it is a general SCAP toolkit widely used on enterprise Linux distributions.

How does it compare with Lynis or Greenbone?
In our view Lynis is a simpler host auditor, Greenbone focuses on network vulnerability scanning, and OpenSCAP runs SCAP content locally.