ScapAnalyzer is a fully client-side, zero-backend tool for analyzing and comparing OpenSCAP compliance reports. Drag and drop your XML or HTML reports from any browser — nothing is uploaded anywhere. All processing and storage happens locally in the browser using IndexedDB.
It is designed to complement SCAP Suite by providing a professional audit and review layer on top of generated scan reports.
🚀 Live Version: y8765.github.io/ScapAnalyzer/
Load multiple XCCDF/ARF XML or HTML reports and instantly see a side-by-side compliance matrix. Each cell shows the result for that rule on that host — color-coded by status (Pass, Fail, Error, Non-Relevant).
Narrow down results instantly:
- Search by rule name, rule ID, or description
- Filter chips: Differences only · All Fail · Exempted · All Pass · Non-Relevant
- Severity filter: High · Medium · Low
- Category grouping for organized viewing
Create and manage a local exemption policy for rules that are intentionally non-compliant:
- Global exemptions — apply across all loaded servers
- Scoped exemptions — apply to specific servers only
- Attach approval details, rationales, and timestamps
- Export / Import policies as a portable JSON file
Export your consolidated compliance matrix to:
| Format | Description |
|---|---|
| 📥 CSV | Raw data for spreadsheet tools |
| 📊 Excel (XLSX) | Formatted workbook with color-coded cells (powered by SheetJS) |
| 📄 Standalone HTML | Self-contained interactive matrix page — share via email or archive offline |
Open y8765.github.io/ScapAnalyzer/ in any modern browser and drag in your reports.
git clone https://github.com/Y8765/ScapAnalyzer.git
cd ScapAnalyzerThen open index.html directly in your browser, or serve it with any static server:
python -m http.server 8000
# Open http://localhost:8000If you have SCAP Suite installed, click the 📊 Open ScapAnalyzer button in the Compliance Gallery — it will open ScapAnalyzer automatically (local clone if detected, otherwise the hosted version).
ScapAnalyzer/
├── css/
│ └── styles.css # Core styling and glassmorphism design tokens
├── js/
│ ├── app.js # Application shell and initialization
│ ├── comparator.js # Comparison matrix builder and filter engine
│ ├── exemptions.js # Exemption database and policy manager
│ ├── exporter.js # CSV, Excel, and standalone HTML exporters
│ ├── parser.js # XCCDF & ARF XML parser and HTML report scavenger
│ ├── storage.js # IndexedDB persistence layer
│ ├── ui.js # DOM renderer and modal/dialog handlers
│ └── xlsx.bundle.js # Bundled SheetJS library for Excel export
├── samples/ # Sample OpenSCAP reports for testing
├── index.html # Main application entrypoint
└── README.md
- SCAP Suite — Remote OpenSCAP scanning platform that generates the reports ScapAnalyzer analyzes
MIT License — see LICENSE for details.