STIG Vault

DISA STIG Checklists & SCAP Benchmarks

Specializing in simplifying the mundane

Automation that keeps DoD ATO work sane — every STIG checklist and SCAP benchmark converted, archived, and searchable, with every STIG check in an online STIG viewer. New here? Start with what is a STIG checklist.

Dashboard

Release analytics

Track STIG and SCAP benchmark releases, quarterly cycles, and catalog growth at a glance.

Search

Find any STIG check or SCAP rule

One search across every STIG check and SCAP benchmark rule — by keyword, V-number, or exact phrase.

STIGs

STIG Repository

Browse STIG packages

Download converted CKLs from the automated cyber.mil pipeline.

STIG Compare

Diff STIG revisions

Side-by-side comparison for Authorized To Operate evidence work.

SCAP Benchmarks

SCAP Repository

Browse SCAP benchmarks

Every DISA SCAP benchmark release — rules, OVAL checks, and source downloads.

SCAP Compare

Diff benchmark releases

See exactly which rules were added, removed, or changed between releases.

Reference

CCIs

Look up control identifiers

Browse Common Control Identifiers mapped back to their STIG procedures.

Guides

Learn the basics

What a STIG checklist is, CKL vs CKLB, and how STIGs and SCAP benchmarks fit together.

Where the data comes from

Every STIG checklist and SCAP benchmark here is converted automatically from the official releases in the DISA STIG Document Library on DoD Cyber Exchange, and each control maps to NIST SP 800-53 through its CCIs. STIG Vault is an independent reference, not an official DISA site — always confirm against the source release before an assessment.