Hub

Open-source picks

Server hardening

OpenSCAP

License
LGPL-2.1-or-later
Latest version
1.4.6, October 22, 2026

What it does

Scans servers against published security hardening baselines and reports what is out of line.

Why we point IT leaders here

Turns a hardening standard into a repeatable report, so you can see how far servers have drifted from a known-good state.

Open open-scap.org

Opens the project's own site in a new tab.

Facts checked November 7, 2026