SSC Atlantic
Security Content Automation Protocol (SCAP) Compliance Checker  
SCAP Compliance Checker (SCC) 

The SCAP Compliance Checker (SCC) is a Security Content Automation Protocol (SCAP) validated application developed  by Space and Naval Warfare (SPAWAR) Systems Center Atlantic.

Standards Supported:

 Platforms Supported:

SCAP Version: 1.0

Windows XP & Server 2003

OVAL Version: 5.10.1

Windows Vista  & Server 2008

XCCDF Version: 1.1.4

Windows 7 & Server 2008 R2

CPE Version: 2.2

Windows 8 & Server 2012

CCE Version: 5.0

Solaris 10

OCIL Version: 2.0

Red Hat Enterprise Linux 4 & 5

DOD ARF Version: 0.41

Debian Linux 5 & 6

Cyberscope Version: 1.0.0 Early Access Release

Mac OS X 10.6, 10.7

Primary Features:

  • No per seat license costs for Federal government/contractor computers
  • Performs compliance scanning using SCAP content
  • Performs vulnerability scanning using OVAL content
  • Performs manual interview checks using OCIL content
  • Creates XCCDF XML results
  • Creates OVAL XML results
  • Creates ARF XML results
  • Creates Cyberscope Autofeed XML results
  • Creates HTML and text based single computer reports
  • Creates HTML and spreadsheet based multi-computer summary reports
  • Allows for installation of custom SCAP and OVAL content
  • Allows for automatic downloading of updated patch content from Internet/Intranet
  • Allows for organizational deviations
  • Allows for organizationally defined compliance thresholds
  • Has graphical and command line interfaces
  • Native executables per platform (no runtime requirements such as Java)



  • The SCC was developed for and funded by the Internal Revenue Service and the National Security  (IRS), with later funding from the National Security Agency (NSA), and is currently funded by Defense Information Systems Agency (DISA).
  • OVAL, CPE, CVE and CCE are registered trademarks of the MITRE Corporation.

Latest Software Release:

  • Version 3.1.2
  • Release Date:  March 7, 2014

Obtaining the Software (DOD)

For Department of Defense (DOD) users with a valid Common Access Card (CAC), the software can be downloaded directly from DISA:  then scroll down to  "SCAP Tools"

Obtaining the Software (Non-DOD)

For US Government Employees and contractors, the software can be obtained via the Office of Management and Budget (OMB) hosted website.  Users will be required to self-activate an account in order to obtain the files.

After registration, the software can be downloaded from:

Alternate Method

SCC is available for any government employee or contractor to the US government; it is not available to the general public.

If you are unable to download SCC by one of the 2 primary methods above, the software can be requested by emailing: .  Please include the following in your request:

  1.  US Federal agency you are supporting
  2. Government POC with .gov or .mil email address or Contract Number

Technical Support

To obtain technical support on the SCC application, please email:

 Checksum information for software

SSC Atlantic
Updated: 3/20/2014 8:00 AM EST   Published (25.0)