Agentless vulnerability scanner for Linux servers
OpenSCAP
Compliance and vulnerability scanning framework
About OpenSCAP
OpenSCAP is a framework that uses SCAP standards to scan systems for compliance policies and known vulnerabilities automatically. Because it is self-hosted, you decide where the data lives, who can access it, and how long it is kept, with no per-seat lock-in. In practice it rewards a little setup effort with long-term independence, transparent behavior, and a community that documents real-world deployments.
OpenSCAP key facts
- Category: Developer Tools
- Pricing: Free — listed in this directory as a free tool, with no paid plan required to use it.
- Focus areas: compliance, scap, scanning, security
- Official site: open-scap.org
About the Developer Tools category
Editors, platforms, and services developers rely on to build and ship software. The Developer Tools category on Tools Hub currently lists 738 tools. Alongside OpenSCAP, it includes Vuls, Trivy, Clair, Checkov.
More in Developer Tools
Comparing tools in the Developer Tools category? These related listings are worth a look: Vuls — Agentless vulnerability scanner for Linux servers; Trivy — All-in-one security scanner for containers and code; Clair — Static analysis of vulnerabilities in containers.
All-in-one security scanner for containers and code
Static analysis of vulnerabilities in containers
Static code analysis for infrastructure as code
Detect compliance and security violations in IaC
Security scanner for Terraform code