An official website of the United States government
Here's how you know
A .mil website belongs to an official U.S. Department of Defense organization in the United States.
A lock (lock ) or https:// means you’ve safely connected to the .mil website. Share sensitive information only on official, secure websites.

SCC Logo and outlined shield with a checkmark in the center

Security Content Automation Protocol (SCAP) Compliance Checker

SCC is a SCAP Validated Authenticated Configuration Scanner, with support for SCAP versions 1.0, 1.1, 1.2 and 1.3.

Primary Features

  • Performs authenticated configuration scanning using SCAP content
  • Supports local and remote scanning of Windows and Linux/Solaris
  • Supports Cisco IOS and IOS XE with offline configuration scanning and SSH based scanning
  • Has graphical and command line interfaces
  • Native executables per platform
 
Man looking over computer code on two monitors at a desk.

Latest Software Release

  • Version: 5.10.1
  • Release Date: 12/2/2024

Download SCC_5.10.1_Checksums.txt (6kb, txt)

SCAP Content Repository Tutorial Videos

End User License (txt, 2kb)

 

Platforms Supported

  • Windows 10, 11
  • Windows Server 2012, 2012 R2, 2016, 2019, 2022
  • Red Hat Enterprise Linux 7, 8, 9 (x64 and aarch64)
  • Solaris 11 (x86 and SPARC)
  • Ubuntu 18.04, 20.04, 22.04 (amd64 and arm64)
  • SUSE Linux Enterprise 12, 15
  • Oracle Linux 7, 8, 9
  • Raspberry Pi OS 11 (armv71 and arm64)
  • Cisco IOS & IOS XE

Standards Supported

  • View Validation

Obtaining the Software

Starting with version 5.4, SCC is publicly available and can be downloaded from Defense Information Systems Agency (DISA).

https://public.cyber.mil/stigs/scap/

Credits

The development of SCC has been funded by several different agencies over the years:

  • 2008 – 2010 Internal Revenue Service (IRS)
  • 2010 – 2012 National Security Agency (NSA)
  • 2013 – 2022 Defense Information Systems Agency (DISA).
  • FY23-24 Two groups of SCC end users

For FY25 and beyond we are looking for additional groups/teams interested in funding SCC development and support.

References

Technical Support

To obtain technical support on the SCC application, complete the form below.

Send an email to scc.fct@navy.mil or use the form below.

   
Site Map
FOIA
Navy.com
Plain Writing
No Fear Act
USA.gov
508 Compliance
Privacy Policy
Veterans Crisis Line
Information Quality
Open Government
Guidance-Card-Icon Dept-Exclusive-Card-Icon