xccdf

Security automation content in SCAP, Bash, Ansible, and other formats

NIST Certified SCAP 1.2 toolkit

SCAP Scanner And Tailoring Graphical User Interface

A command-line and ruby API of utilities, converters and tools for creating, converting and processing security baseline formats, results and data

A utility that watches a path for test result files on behalf of a STIG Manager Collection

***MERGED: SEE README:*** The XCCDF to InSpec parser scans and extracts the controls defined in the DISA XCCDF STIG XML documents and converts them into InSpec control 'stubs' to help ease the pain of InSpec profile developers everywhere.

Turn any DISA STIG into a plain-English, risk-ranked hardening plan — and check a machine against it under a human approval gate. Free, MIT, no API key.

Parsing XCCDF files

Parse XCCDF files and produce human-readable outputs

Standalone, offline Python tool for parsing DISA STIG XCCDF manuals, generating patch-cycle deltas, integrity-checked datasets, and executive-level summaries for regulated environments.

Generate a ckl file based on STIG zip and/or xccdf file(s)

Local Python CLI that compares DISA STIG XCCDF releases and generates impact summaries, remediation backlogs, evidence checklists, and ticket-ready exports.

OSCAP/OVAL reporting

SCAP OVAL Definition for SUSE Linux Enterprise Server 11

Free Windows app for DISA STIG checklists: open .ckl and .cklb, start one from a STIG benchmark, apply SCAP results, carry an assessment forward to a new STIG release, and export Vulnerator-style Excel reports that import right back. C# / .NET 8 / WPF, MIT.

Scan, analyze, and export detailed user profiles from any GitHub account with this powerful CLI tool.

Windows PowerShell 5.1 DISA STIG / SCAP compliance auditor (zero-dependency, XCCDF-driven)

Broadcast educational content with this scalable React application featuring role-based dashboards, content approval workflows, and live streaming capabilities.

Convert SRGs and STIGs written in YAML to XCCDF.