
OpenSCAP
OpenSCAP is an open-source project, with its portal copyrighted by Red Hat, that provides tools for SCAP-based security compliance and vulnerability scanning, including the oscap scanner and SCAP Workbench. The OpenSCAP base library is licensed under LGPL-2.1-or-later and SCAP Workbench under GPL-3.0.
Licensing at a Glance
- Open source
The OpenSCAP project is a collection of open-source tools implementing the NIST Security Content Automation Protocol (SCAP) standard and received SCAP 1.2 certification from NIST in 2014.[1]
OpenSCAP Base is licensed under the GNU Lesser General Public License version 2.1, and its source files allow use of version 2.1 or any later version.[2]
SCAP Workbench, the graphical front end built on OpenSCAP Base, is licensed under the GNU General Public License version 3.[3]
OpenSCAP Base provides the NIST-certified oscap command-line scanner, and SCAP Workbench is a graphical interface layered on top of it.[4]
Products
- OpenSCAP Base (oscap)Security Compliance Software
- SCAP WorkbenchSecurity Compliance Software
- SCAP Security Guide
References
- Home | OpenSCAP portal · open-scap.org · retrieved 2026-09-27
- OpenSCAP COPYING · github.com · retrieved 2026-09-27
- SCAP Workbench COPYING · github.com · retrieved 2026-09-27
- Tools | OpenSCAP portal · open-scap.org · retrieved 2026-09-27