Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Projects Security Content Automation Protocol

Security Content Automation Protocol SCAP

SCAP Releases

SCAP must evolve continuously to meet the changing needs of the community. As a result, multiple versions of SCAP may be available at any given time. The following list presents the versions that are currently available. The current effective version is SCAP 1.3.

Protocol

SCAP: Security Content Automation Protocol

Version: 1.4 (IPD)

Status: IPD (Initial Public Distribution)

Specification: NIST SP 800-126 Rev. 4

Annex: NIST SP 800-126 Rev. 4 Annex

 

SCAP: Security Content Automation Protocol

Version: 1.3

Status: Final

Specification: NIST SP 800-126 Rev. 3

Annex: NIST SP 800-126 Rev. 3 Annex

 

SCAP: Security Content Automation Protocol

Version: 1.2

Status: Final

Specification: NIST SP 800-126 Rev. 2

SCAP: Security Content Automation Protocol

Version: 1.1

Status: Final

Specification: NIST SP 800-126 Rev. 1

SCAP: Security Content Automation Protocol

Version: 1.0

Status: Final

Specification: NIST SP 800-126

 

Contacts

SCAP Inquiries
[email protected]

Created December 07, 2016, Updated February 25, 2026