Security Content Automation Protocol Validated Products
This webpage contains a list of products that have been validated by NIST as conforming to the Security Content Automation Protocol (SCAP) and its component standards. Click on the vendor or product name to see a full description of the products validation information and status.
Please visit the SCAP validation program webpage for a description of the validation process and information on the SCAP capabilities referenced in the table below. For more information relating to SCAP please visit http://scap.nist.gov.
Support for U.S. Government Programs
Federal Desktop Core Configuration Initiative
The U.S. Office of Management and Budget has required, in the August 11, 2008, M-08-22 memorandum to Federal CIOs, that "Both industry and government information technology providers must use SCAP validated tools with FDCC Scanner capability to certify their products operate correctly with FDCC configurations and do not alter FDCC settings. Agencies will use SCAP tools to scan for both FDCC configurations and configuration deviations approved by department or agency accrediting authority. Agencies must also use these tools when monitoring use of these configurations as part of FISMA continuous monitoring."
Situational Awareness and Incident Response SmartBUY
The General Services Administration is requiring SCAP validation within blanket purchase agreements for vulnerability and configuration management products (Solicitation Number: Reference-Number-QTA0-08-HC-B-0003).
NOTE: All SCAP 1.0 Validated Products Expired December 31, 2013.
Authenticated Configuration Scanner
Authenticated Vulnerability and Patch Scanner
Unauthenticated Vulnerability Scanner
Common Vulnerabilities and Exposures (CVE) Option
Open Checklist Interactive Language (OCIL) Option
Laboratories Accredited to do SCAP Testing
The labs listed below have been accredited by the NIST National Voluntary Laboratory Accreditation Program (NVLAP) to perform SCAP validation testing. Click on the lab name to see a full listing of the lab's accredited scopes
NVLAP Accredited Independent SCAP Testing Laboratories
||Accredited Testing Scopes
|Booz Allen Hamilton
|EWA - Canada