All SCAP Benchmarks (A–Z)SCAP Benchmarks A–Z

Every current DISA SCAP benchmark, A to Z — the automatable STIG requirements, packaged as XCCDF rules with OVAL check logic for SCAP Compliance Checker (SCC) or OpenSCAP. Each benchmark page lists every rule with its severity and a readable view of what the check actually evaluates.

See STIG vs SCAP benchmark for how the two fit together, or browse every STIG checklist.

65 benchmarks · updated 2026-10-27

A

C

G

H

K

M

O

R

S

T

W

Frequently asked questions

What is a SCAP benchmark?

A SCAP benchmark is the automatable part of a DISA STIG, packaged as XCCDF rules with OVAL check logic so a scanner such as DISA's SCAP Compliance Checker (SCC) or OpenSCAP can evaluate a system without a person reviewing each rule.

How is a SCAP benchmark different from a STIG checklist?

The STIG checklist covers every requirement, including ones that need a person to verify. The SCAP benchmark covers only the requirements a scanner can check. Rule IDs match (the same SV- number), so a scan result maps straight back onto the checklist.