National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 188 matching records. Displaying matches 1 through 20.


Name (Version) Target Product Category Authority Last Modified Resources
CIS Microsoft SQL Server 2014 Benchmark (1.1.0) Microsoft SQL Server 2014 Database Management System Center for Internet Security (CIS) 12/01/2015 Machine-Readable Format - CIS Microsoft SQL Server 2014 Benchmark v1.1.0
Apache HTTP Server 2.2 (Version 3.0.0) Apache HTTP Server 2.2 Web Server Center for Internet Security (CIS) 09/23/2013 Prose - Apache HTTP Server 2.2 Version 3.0.0
CIS Apache HTTP Server 2.2 Benchmark (3.4.0) Apache HTTP Server 2.2 Web Server Center for Internet Security (CIS) 11/02/2016 Prose - Apache HTTP Server 2.2 Version 3.4.0
Apache Benchmark for Unix, Levels I and II (Version 2.1) Apache HTTP Server 2.0
Apache HTTP Server 1.3
Web Server Center for Internet Security (CIS) 08/07/2018 Prose - Center for Internet Security Benchmark for Apache Web Server v2.1
CIS Apache HTTP Server 2.4 Benchmark (1.3.0) Apache HTTP Server 2.4 Web Server Center for Internet Security (CIS) 07/08/2016 Prose - CIS Apache HTTP Server 2.4 Benchmark v1.3.0
CIS Apache Tomcat 7 Benchmark (1.0.0) Apache Tomcat Application Server Center for Internet Security (CIS) 05/04/2016 Prose - CIS Apache Tomcat 7 Benchmark v1.0.0
CIS Apache Tomcat 7 Benchmark (1.1.0) Apache Tomcat Application Server Center for Internet Security (CIS) 06/07/2016 Prose - CIS Apache Tomcat 7 Benchmark v1.1.0
CIS Apache Tomcat 8 Benchmark (1.0.0) Apache Tomcat Application Server Center for Internet Security (CIS) 05/05/2016 Prose - CIS Apache Tomcat 8 Benchmark v1.0.0
CIS Apache Tomcat 8 Benchmark (1.0.1) Apache Tomcat Application Server Center for Internet Security (CIS) 10/11/2016 Prose - CIS Apache Tomcat 8 Benchmark v1.0.1
CIS Apple iOS 10 Benchmark (2.0.0) Apple iOS 10 Operating System Center for Internet Security (CIS) 06/27/2017 Prose - CIS Apple iOS 10 Benchmark v2.0.0
CIS Apple iOS 9 Benchmark (1.0.0) Apple iPhone Handheld Device Center for Internet Security (CIS) 05/04/2016 Prose - CIS Apple iOS 9 Benchmark v1.0.0
CIS Apple OS X 10.8 Benchmark (1.1.0) Apple Mac OS X 10.8.0 Operating System Center for Internet Security (CIS) 11/13/2014 Prose - CIS Apple OS X 10.8 Benchmark v1.1.0
CIS Apple OS X 10.9 Benchmark (1.0.0) Apple OS X 10.9 Operating System Center for Internet Security (CIS) 11/13/2014 Prose - CIS Apple OSX 10.9 Benchmark v1.0.0
CIS BIND Benchmark (v2.0.0) ISC Bind 9.3.1
ISC Bind 9.2.4
DNS Server Center for Internet Security (CIS) 05/10/2011 Prose - CIS BIND Benchmark v2.0.0
CIS CentOS Linux 6 Benchmark (1.0.0) CentOS Linux 6 Operating System Center for Internet Security (CIS) 11/13/2014 Prose - CIS CentOS Linux 6 Benchmark v1.0.0
CIS Cisco ASA, FWSM, and PIX Benchmark (v2.0.0) Cisco PIX Firewall 535
Cisco Firewall Services Module
Cisco PIX 500 Security Appliance
Cisco PIX ASA
Cisco PIX Firewall 501
Cisco PIX Firewall 506
Cisco PIX 506E Firewall Security Appliance
Cisco PIX Firewall 515
Cisco PIX 515E Firewall Security Appliance
Cisco PIX Firewall 520
Cisco PIX Firewall 525
Firewall Center for Internet Security (CIS) 11/17/2011 Prose - CIS Cisco ASA, FWSM, and PIX Benchmark v2.0.0
Cisco Firewall (v3.0.0) Cisco PIX ASA
Cisco ASA 5500 8.2
Firewall
Network Router
Center for Internet Security (CIS) 08/07/2018 Prose - CIS Cisco Firewall Benchmark v3.0.0
CIS CISCO Firewall Benchmark (4.0.0) Cisco ASA 8
Cisco ASA 9
Firewall Center for Internet Security (CIS) 08/11/2016 Prose - CIS CISCO Firewall Benchmark v4.0.0
CIS Cisco IOS 15 Benchmark (4.0.0) Cisco IOS 15 Operating System Center for Internet Security (CIS) 08/25/2015 Prose - CIS Cisco IOS 15 Benchmark v4.0.0
CIS Cisco IOS Benchmark (v2.4.0) Cisco IOS Network Router Center for Internet Security (CIS) 05/10/2011 Prose - CIS Cisco IOS Benchmark v2.4.0
* This checklist is still undergoing review for inclusion into the NCP.