Last modified 17 months ago Last modified on 09/29/15 16:31:56

SCAP Workbench

A GUI tool that serves as an SCAP scanner and provides tailoring functionality for SCAP content. It uses the openscap library and its oscap tool to do all evaluation.

Intended Use

The main goal of this application is to lower the initial barrier of using SCAP. Therefore, the scope of very narrow - scap-workbench only scans a single machine and only with XCCDF/SDS (no direct OVAL evaluation). The assumption is that this is enough for users who want to scan a few machines and users with huge amount of machines to scan will just use scap-workbench to test or hand-tune their content before deploying it with more advanced (and harder to use) tools like spacewalk.

Feature highlights

  • XCCDF 1.1 and 1.2 support
  • Source Data Stream 1.2 support
  • XCCDF 1.2 Tailoring file support
  • Evaluation of local machine
  • Evaluation of remote machine (using ssh)
  • Profile customization support - selection and unselection of rules, value changes
  • Saving results as XCCDF 1.1 or 1.2 (depending on input) or ARF 1.1
  • Exporting content as RPM or into a directory


  • Qt4
  • qtwebkit (optional)
  • linux-utils
  • openssh-clients
  • polkit and pkexec (optional, required for privileged local scanning)
  • openscap 1.2.0+


Latest stable release: 1.1.1

Latest stable: 1.1.1

Older stable: 1.0.4

Fedora distribution

scap-workbench ships with Fedora 21, 20 and 19

# yum install scap-workbench


Please see User Manual for more introductory information about this application.


Patches, bug reports and feature requests are always welcomed. The preferred way to contribute is via Github pull requests. We also accept plain patches on the mailing list.

Bug reports have been moved to github, please use

Git repository

Repository URI:

Mailing list



  • Martin Preisler <mpreisle@…>
  • Jan Lieskovsky <jlieskov@…>