The SCAP Compliance Checker (SCC) is a Security Content Automation Protocol (SCAP) validated application developed  by Space and Naval Warfare (SPAWAR) Systems Center Atlantic.

Primary Features:

• No per seat license costs for Federal government/contractor computers
• Performs compliance scanning using SCAP content
• Performs vulnerability scanning using OVAL content
• Performs manual interview checks using OCIL content
• Creates XCCDF XML results
• Creates OVAL XML results
• Creates ARF XML results
• Creates Cyberscope Autofeed XML results
• Creates HTML and text based single computer reports
• Creates HTML and spreadsheet based multi-computer summary reports
• Allows for installation of custom SCAP and OVAL content
• Allows for automatic downloading of updated patch content from Internet/Intranet
• Allows for organizational deviations
• Allows for organizationally defined compliance thresholds
• Has graphical and command line interfaces
• Native executables per platform (no runtime requirements such as Java)

References:

• NIST USGCB
• NIST SCAP
• NIST SCAP Validation
• MITRE OVAL

Credits:

• The SCC was developed for and funded by the Internal Revenue Service and the National Security Agency.
• OVAL, CPE, CVE and CCE are registered trademarks of the MITRE Corporation.

Latest Software Release: Version 3.1

Release Date:  February 12, 2013

Obtaining the Software (DOD)

For Department of Defense (DOD) users with a valid Common Access Card (CAC), the software can be downloaded directly from DISA:  http://iase.disa.mil/stigs/scap/index.html then click "SCAP Tools"

 Checksum information for software