OpenSCAP Compliance Scanner
ToolThe open-source Security Content Automation Protocol (SCAP) framework. OpenSCAP evaluates system configurations against NIST, CIS, and DISA STIG standards with automated remediation capabilities.
Key Features
Resources
Videos
System Compliance Testing with OpenSCAP
Red Hat's own channel walks you through installing and wielding OpenSCAP on RHEL 9, from configuring the SCAP Security Guide to generating compliance reports that actually make sense. In under six minutes, you'll understand how CIS Benchmarks translate into automated scans and why your auditor might finally stop sending you those passive-aggressive emails about missing documentation.
Hardening RHEL 9 with OpenSCAP and DISA STIG
A brand new RHEL 9 box gets its first OpenSCAP scan against the DISA STIG profile, and at 0:58 the report reads 47% hardened. The report opens in links, a browser that runs inside the terminal, so the HTML never leaves the server. Then the same scan runs again with remediate switched on, and fixed and changed results start rolling in. The host is clear that a STIG scan is one step toward compliance, not the finish line. Write down your own before number first; it makes the after number worth showing around.
More in Linux servers
- OpenSCAP Compliance Scanner
- AIDE File Integrity Checker
- Lynis Security Auditor
- SSH MFA Guide: A Second Factor on Every Server Login