LICENSEWARE
Publisher · Open source

OpenSCAP

OpenSCAP is an open-source project, with its portal copyrighted by Red Hat, that provides tools for SCAP-based security compliance and vulnerability scanning, including the oscap scanner and SCAP Workbench. The OpenSCAP base library is licensed under LGPL-2.1-or-later and SCAP Workbench under GPL-3.0.

Licensing at a Glance

  • Open source
  1. The OpenSCAP project is a collection of open-source tools implementing the NIST Security Content Automation Protocol (SCAP) standard and received SCAP 1.2 certification from NIST in 2014.[1]

  2. OpenSCAP Base is licensed under the GNU Lesser General Public License version 2.1, and its source files allow use of version 2.1 or any later version.[2]

  3. SCAP Workbench, the graphical front end built on OpenSCAP Base, is licensed under the GNU General Public License version 3.[3]

  4. OpenSCAP Base provides the NIST-certified oscap command-line scanner, and SCAP Workbench is a graphical interface layered on top of it.[4]

Products

References

  1. Home | OpenSCAP portal · open-scap.org · retrieved 2026-09-27
  2. OpenSCAP COPYING · github.com · retrieved 2026-09-27
  3. SCAP Workbench COPYING · github.com · retrieved 2026-09-27
  4. Tools | OpenSCAP portal · open-scap.org · retrieved 2026-09-27
Esc