Tech riderRev. 30 Sept 2026
- 1Runs onLinux, Mac, self-hosted, Windows
- 2CostsFree plan
- 3Policy as codeYes
3 lines stated Written from the maker's own pages: open-scap.org
Overview
OpenSCAP is ranked #11 of 27 in infrastructure testing tools on Specifiction. It runs on Linux, macOS, Self-hosted, Windows. There is a free plan.
OpenSCAP plans and pricing
All plansOpenSCAP tools Free All projects under the OpenSCAP umbrella are open source and can be downloaded and used for free. open-scap.org · 30 Sept 2026
Compared on infrastructure testing tools
- Free plan
- Yesopen-scap.org
- Policy as code
- Yesopen-scap.org
Facts
- Purpose
- OpenSCAP is a collection of open source tools for implementing and enforcing the Security Content Automation Protocol (SCAP) standard.open-scap.org · 30 Sept 2026
- Compliance and vulnerability assessment
- The project provides tools and customizable policies for security compliance and automated vulnerability checking.open-scap.org · 30 Sept 2026
- OpenSCAP Base
- OpenSCAP Base provides a library and the oscap command-line tool to parse and evaluate SCAP content, scan systems, and format content into documents.open-scap.org · 30 Sept 2026
- Supported content
- OpenSCAP Base supports XCCDF benchmarks and OVAL definitions and states support for SCAP 1.2 with backward compatibility for SCAP 1.1 and 1.0.open-scap.org · 30 Sept 2026
- Desktop scanning
- SCAP Workbench lets users tailor SCAP content, run local or remote scans, and export results.open-scap.org · 30 Sept 2026
- Scheduled assessment
- OpenSCAP Daemon evaluates machines and containers according to a schedule.open-scap.org · 30 Sept 2026
- Policy customization
- Users can change policy variables, enable or disable rules, and save customized policies separately for reuse when the original content is updated.open-scap.org · 30 Sept 2026
- Automated remediation limit
- Security policies may include automated remediation, but the site warns that it can break infrastructure functionality and that not all rules can be remediated automatically.open-scap.org · 30 Sept 2026
- Integrations
- The site lists integrations with Red Hat Satellite 6 (Foreman), Red Hat Satellite 5 (Spacewalk), RH Access Insights, Preupgrade Assistant, and orcharhino.open-scap.org · 30 Sept 2026
- Centralized management
- With Red Hat Satellite 6, the site describes centralized policy management, scheduled audits, and collection and search of audit results.open-scap.org · 30 Sept 2026
- Container scanning
- Atomic Scan can scan containers for security vulnerabilities and compliance issues using the openscap Docker image in the official Red Hat registry.open-scap.org · 30 Sept 2026
- Supported operating systems
- OpenSCAP Base is available on Linux distributions including Red Hat Enterprise Linux, Fedora, and Ubuntu, and the site says it supports Microsoft Windows since version 1.3.0.open-scap.org · 30 Sept 2026
- Certification
- The project says it was awarded SCAP 1.2 certification by NIST in 2014.open-scap.org · 30 Sept 2026
- Intended users
- The site identifies government agencies and contractors, businesses, and the open source community as audiences for OpenSCAP.open-scap.org · 30 Sept 2026
Best OpenSCAP alternatives
See all 20 All accessCh 01 Chef InSpec Free planFree trialAPI Free to start7.5 All accessCh 02 Conftest Free planLinuxMac Free to start7.4 All accessCh 03 kubeconform Free planLinuxMac Free to start7.2 All accessCh 04 Test Kitchen Free planLinuxMac Free to start7.2 All accessCh 05 AWS CloudFormation Free planAPILinux Free to start7.1 All accessCh 06 Sonobuoy LinuxMac 7.1
Where it ranks on Specifiction
Is OpenSCAP yours?
Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.
Sources
- open-scap.org· checked 30 Sept 2026
- open-scap.org/features/· checked 30 Sept 2026
- open-scap.org/tools/openscap-base/· checked 30 Sept 2026
- open-scap.org/download/· checked 30 Sept 2026
- open-scap.org/security-policies/· checked 30 Sept 2026
- open-scap.org/tools/systems-management/· checked 30 Sept 2026
- open-scap.org/tools/· checked 30 Sept 2026