National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 139 matching records. Displaying matches 1 through 20.


Name (Version) Target Authority Last Modified Resources
CIS Apache Tomcat 8 Benchmark (1.1.0) Apache Tomcat 8.0 Center for Internet Security (CIS) 11/04/2019 Prose - Apache Tomcat 8 Benchmark v1.1.0
CIS Apache Tomcat 9 Benchmark (1.0.0) Apache Tomcat 9.0 Center for Internet Security (CIS) 12/04/2019 Prose - Apache Tomcat 9 Benchmark v1.0.0
Apache Benchmark for Unix, Levels I and II (Version 2.1) Apache HTTP Server 1.3
Apache HTTP Server 2.0
Center for Internet Security (CIS) 07/31/2019 Prose - Center for Internet Security Benchmark for Apache Web Server v2.1
CIS Aliyun Linux 2 Benchmark (1.0.0) Alibaba Aliyun Linux 2.0 Center for Internet Security (CIS) 12/05/2019 Prose - CIS Aliyun Linux 2 Benchmark v1.0.0
CIS Amazon Linux 2 Benchmark (1.0.0) Amazon Linux 2 Center for Internet Security (CIS) 09/24/2019 Prose - CIS Amazon Linux 2 Benchmark v1.0.0
CIS Amazon Web Services Foundations Benchmark (v1.2.0) Amazon Web Services Center for Internet Security (CIS) 09/24/2019 Prose - CIS Amazon Web Services Foundations Benchmark v1.2.0
CIS Apache Cassandra 3.11 Benchmark (1.0.0) Apache Cassandra 3.11 Center for Internet Security (CIS) 06/04/2019 Prose - CIS Apache Cassandra 3.11 Benchmark v1.0.0
CIS Apache HTTP Server 2.2 Benchmark (3.6.0) Apache HTTP Server 2.2 Center for Internet Security (CIS) 09/24/2019 Prose - CIS Apache HTTP Server 2.2 Benchmark v3.6.0
CIS Apache Tomcat 7 Benchmark (1.1.0) Apache Tomcat Center for Internet Security (CIS) 08/13/2019 Prose - CIS Apache Tomcat 7 Benchmark v1.1.0
CIS Apple iOS 10 Benchmark (2.0.0) Apple iOS 10 Center for Internet Security (CIS) 06/27/2017 Prose - CIS Apple iOS 10 Benchmark v2.0.0
CIS Apple iOS 11 Benchmark (1.0.0) Apple iOS 11 Center for Internet Security (CIS) 09/24/2019 Prose - CIS Apple iOS 11 Benchmark v1.0.0
CIS Apple iOS 12 Benchmark (1.0.0) Apple iOS 12 Center for Internet Security (CIS) 09/24/2019 Prose - CIS Apple iOS 12 Benchmark v1.0.0
CIS Apple iOS 9 Benchmark (1.0.0) Apple iPhone Center for Internet Security (CIS) 07/26/2019 Prose - CIS Apple iOS 9 Benchmark v1.0.0
CIS Apple macOS 10.12 Benchmark (1.1.0) Apple OS X 10.12 Center for Internet Security (CIS) 09/24/2019 Prose - CIS Apple macOS 10.12 Benchmark v1.1.0
CIS Apple macOS 10.13 Benchmark (1.0.0) Apple macOS 10.13 Center for Internet Security (CIS) 06/14/2019 Prose - CIS Apple macOS 10.13 Benchmark v1.0.0
CIS Apple OS X 10.8 Benchmark (1.3.0) Apple Mac OS X 10.8.0 Center for Internet Security (CIS) 01/03/2020 Prose - CIS Apple OS X 10.8 Benchmark v1.1.0
CIS Apple OS X 10.9 Benchmark (1.3.0) Apple OS X 10.9 Center for Internet Security (CIS) 01/03/2020 Prose - CIS Apple OSX 10.9 Benchmark v1.0.0
CIS BIND Benchmark (v2.0.0) ISC Bind 9.2.4
ISC Bind 9.3.1
Center for Internet Security (CIS) 07/26/2019 Prose - CIS BIND Benchmark v2.0.0
CIS CentOS Linux 6 Benchmark (2.1.0) CentOS Linux 6 Center for Internet Security (CIS) 01/03/2020 Prose - CIS CentOS Linux 6 Benchmark v1.0.0
CIS Cisco ASA, FWSM, and PIX Benchmark (v2.0.0) Cisco Firewall Services Module
Cisco PIX 500 Security Appliance
Cisco PIX 506E Firewall Security Appliance
Cisco PIX 515E Firewall Security Appliance
Cisco PIX ASA
Cisco PIX Firewall 501
Cisco PIX Firewall 506
Cisco PIX Firewall 515
Cisco PIX Firewall 520
Cisco PIX Firewall 525
Cisco PIX Firewall 535
Center for Internet Security (CIS) 07/26/2019 Prose - CIS Cisco ASA, FWSM, and PIX Benchmark v2.0.0
* This checklist is still undergoing review for inclusion into the NCP.