All STIG Checklists (A–Z)STIG Checklists A–Z

Every current DISA STIG checklist, A to Z — the latest version and release of each Security Technical Implementation Guide, ready to download as a .ckl and open in DISA STIG Viewer. Each checklist lists every requirement (V-number) with its severity, check text, and fix text, so you can assess a system and record Open, Not a Finding, or Not Applicable for your ATO package.

New to checklists? Start with What is a STIG checklist? or CKL vs CKLB. Looking for the automated side? See every SCAP benchmark.

766 checklists · updated 2026-10-27

A

B

C

D

E

F

G

H

I

J

K

L

M

N

O

P

R

S

T

U

V

W

X

Z

Frequently asked questions

What is a STIG checklist?

A STIG checklist is the working copy of a DISA Security Technical Implementation Guide (STIG) for one system: every requirement (V-number) from the STIG, with a status — Open, Not a Finding, Not Applicable, or Not Reviewed — plus your comments and finding details. It is the evidence you hand an assessor for an Authority to Operate (ATO).

What file format is a STIG checklist?

DISA STIG Viewer 2.x saves checklists as .ckl (XML). STIG Viewer 3 saves them as .cklb (JSON) and can import older .ckl files. Every checklist on STIG Vault downloads as a .ckl you can open in either version.

How often are STIG checklists updated?

DISA publishes STIG updates on a quarterly release cycle, plus out-of-cycle releases for new or urgent content. STIG Vault checks the DISA library automatically, so every checklist here is the current release; older releases stay available for comparison.

Is there an online STIG Viewer?

Yes. Every checklist on this page opens in the browser with each STIG check, its severity (CAT I–III), check text, and fix text. Download the .ckl to record statuses in DISA STIG Viewer 2.x or 3.x.

Are STIG checklists free to download?

Yes. STIGs are public DoD guidance published by DISA. STIG Vault converts each one into a ready-to-use checklist and lets you browse, search, and compare them without an account.