This is the repository of Security Content Automation Protocol (SCAP) benchmarks, designed to function in the SCAP Compliance Checker (SCC) https://www.niwcatlantic.navy.mil/Technology/SCAP/

Note: All SCAP 1.4 content in this repository requires a tool capable of running SCAP 1.4 content. For SCC that requires version 5.11 or later.

2026 Quarter 2 Release (05/01/2026)

The current content release is based on DISA's Q2 2026 STIG's and SCAP benchmarks, and will be bundled with the upcoming SCC 5.14.1. Release Notes

Consolidated Bundle and Repository Stats

Consolidated_Bundle_Q2_2026.zip

niwc-content-repository-stats_04-28-2026

NIWC Atlantic Developed SCAP 1.4 Content

NIWC Atlantic has developed SCAP Content Benchmarks based on publicly available DISA STIG Manuals, located at https://public.cyber.mil/stigs/downloads/

Date	Title	STIG Version	Benchmark Version
2026-04-27	Active Directory Domain STIG SCAP Benchmark	003.006	003.006.1
2026-04-27	Active Directory Forest STIG SCAP Benchmark	003.002	003.002.1
2026-04-27	Apache Server 2.4 UNIX STIG SCAP Benchmark	001.001	001.001.1
2026-04-27	Apache Server 2.4 UNIX Site STIG SCAP Benchmark	001.001	001.001.1
2026-04-27	Apache Server 2.4 Windows STIG SCAP Benchmark	001.001	001.001.1
2026-04-27	Apache Site 2.4 Windows STIG SCAP Benchmark	001.001	001.001.1
2026-04-27	Cisco IOS XE Switch NDM STIG SCAP Benchmark	003.005	003.005.5
2026-04-27	Cisco IOS Router NDM STIG SCAP Benchmark	003.006	003.006.5
2026-04-27	Cisco IOS Switch NDM STIG SCAP Benchmark	003.006	003.006.5
2026-04-27	Microsoft IIS 10.0 Server STIG SCAP Benchmark	003.006	003.006.17
2026-04-27	Microsoft IIS 10.0 Site STIG SCAP Benchmark	002.014	002.014.18
2026-02-09	Microsoft IIS 8.5 Server STIG SCAP Benchmark	002.007	002.007.12
2026-02-09	Microsoft IIS 8.5 Site STIG SCAP Benchmark	002.009	002.009.12
2026-02-09	Microsoft OneDrive STIG SCAP Benchmark	002.004	002.004.11
2026-04-27	MS SQL Server 2016 Database STIG SCAP Benchmark	003.004	003.004.12
2026-04-27	MS SQL Server 2016 Instance STIG SCAP Benchmark	003.006	003.006.13
2026-04-27	MS SQL Server 2022 Database STIG SCAP Benchmark	001.002	001.002.7
2026-04-27	MS SQL Server 2022 Instance STIG SCAP Benchmark	001.003	001.003.7
2026-04-27	Microsoft DNS Server STIG SCAP Benchmark	003.003	003.003.7

NIWC Atlantic Enhanced Versions of DISA SCAP 1.4 Content

NIWC Atlantic has created enhanced SCAP Content containing a combination of automated and manual tests based on DISA Developed STIG Manual’s and DISA developed SCAP Benchmark obtained from https://www.cyber.mil/stigs/downloads/ and https://www.cyber.mil/stigs/scap/

Date	Title	STIG Version	Benchmark Version
2026-04-27	Adobe Acrobat Professional DC Continuous Track STIG SCAP Benchmark	002.001	002.001.1
2026-05-01	Adobe Acrobat Reader DC Continuous Track STIG SCAP Benchmark	002.004	002.004.12
2026-04-27	Canonical Ubuntu 18.04 LTS STIG SCAP Benchmark	002.012	002.012.15
2026-04-27	Canonical Ubuntu 20.04 LTS STIG SCAP Benchmark	002.005	002.005.17
2026-04-27	Canonical Ubuntu 22.04 LTS STIG SCAP Benchmark	002.006	002.006.9
2026-04-27	Canonical Ubuntu 24.04 LTS STIG SCAP Benchmark	001.004	001.004.6
2026-04-27	Cisco IOS XE Router NDM STIG SCAP Benchmark	003.005	003.005.17
2026-04-27	Cisco IOS XE Router RTR STIG SCAP Benchmark	003.005	003.005.17
2026-02-09	Google Chrome Current Windows STIG SCAP Benchmark	002.011	002.011.15
2026-04-27	Kubernetes STIG SCAP Benchmark	002.004	002.004.7
2026-02-09	Mozilla Firefox for Linux STIG SCAP Benchmark	006.006	006.006.11
2026-02-09	Mozilla Firefox for Windows STIG SCAP Benchmark	006.007	006.007.12
2026-04-27	Microsoft Defender Antivirus STIG SCAP Benchmark	002.008	002.008.14
2026-04-27	Microsoft DotNet Framework 4.0 STIG SCAP Benchmark	002.007	002.007.14
2026-04-27	Microsoft Edge STIG SCAP Benchmark	002.005	002.005.15
2026-04-27	Microsoft Internet Explorer 11 STIG SCAP Benchmark	002.009	002.009.16
2026-04-27	Microsoft Office 365 ProPlus STIG SCAP Benchmark	003.008	003.008.10
2026-02-09	Microsoft Windows 10 STIG SCAP Benchmark	003.007	003.007.16
2026-04-27	Microsoft Windows 11 STIG SCAP Benchmark	002.008	002.008.17
2026-02-09	Microsoft Windows Server 2012/2012 R2 Domain Controller STIG SCAP Benchmark	003.006	003.006.12
2026-02-09	Microsoft Windows Server 2012/2012 R2 Member Server STIG SCAP Benchmark	003.006	003.006.12
2026-04-27	Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark	002.003	002.003.13
2026-04-27	Microsoft Windows Server 2016 STIG SCAP Benchmark	002.008	002.008.18
2026-04-27	Microsoft Windows Server 2019 STIG SCAP Benchmark	003.008	003.008.18
2026-04-27	Microsoft Windows Server 2022 STIG SCAP Benchmark	002.008	002.008.18
2026-04-27	Oracle Linux 7 STIG SCAP Benchmark	003.003	003.003.15
2026-04-27	Oracle Linux 8 STIG SCAP Benchmark	002.008	002.008.18
2026-04-27	Oracle Linux 9 STIG SCAP Benchmark	001.003	001.003.4
2026-04-27	Red Hat Enterprise Linux 7 STIG SCAP Benchmark	003.015	003.015.18
2026-04-27	Red Hat Enterprise Linux 8 STIG SCAP Benchmark	002.007	002.007.21
2026-04-27	Red Hat Enterprise Linux 9 STIG SCAP Benchmark	002.008	002.008.12
2026-04-27	SUSE Linux Enterprise Server 12 STIG SCAP Benchmark	003.005	003.005.16
2026-04-27	SUSE Linux Enterprise Server 15 STIG SCAP Benchmark	002.008	002.008.18
2026-04-27	Solaris 11 SPARC STIG SCAP Benchmark	003.004	003.004.17
2026-04-27	Solaris 11 X86 STIG SCAP Benchmark	003.004	003.004.17
2026-04-27	Tri-Lab Operating System Stack (TOSS) 4 STIG SCAP Benchmark	002.006	002.006.7

NIST / NIWC Collaboration on DISA STIG SCAP 1.4 Content

NIWC Atlantic has created enhanced SCAP Content containing a combination of automated and manual tests based on DISA Developed STIG Manual’s and NIST developed SCAP Benchmark obtained from https://www.cyber.mil/stigs/download/ and https://github.com/usnistgov/macos_security

Date	Title	STIG Version	Benchmark Version
2026-02-09	Apple macOS 13 (Ventura) STIG SCAP Benchmark	001.005	001.005.6
2026-02-09	Apple macOS 14 (Sonoma) STIG SCAP Benchmark	002.003	002.003.6
2026-04-27	Apple macOS 15 (Sequoia) STIG SCAP Benchmark	001.004	001.004.7
2026-04-27	Apple macOS 26 (Tahoe) STIG SCAP Benchmark	001.004	001.004.4

Sunset SCAP 1.3 Content

Below are older SCAP Content Benchmarks from DISA STIG's that DISA has marked as "Sunset" and not currently included with the SCAP Compliance Checker, or part of the the Consolidated Bundle.

Date	Title	Benchmark Version
8/04/2023	Canonical Ubuntu 16.04 STIG SCAP Benchmark - Sunset	2.3.3
8/04/2023	Red Hat Enterprise Linux 6 STIG SCAP Benchmark - Sunset	2.2.3
8/04/2023	Solaris 10 SPARC STIG SCAP Benchmark - Sunset	2.4.3
8/04/2023	Solaris 10 X86 STIG SCAP Benchmark - Sunset	2.4.4