Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-126 Rev. 4

Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.4

Date Published: June 2026

Author(s)

Dragos Prisaca (NIST), Stephen Quinn (NIST), Jack Vander Pol (NIWC Atlantic), Daniel Harris (NIWC Atlantic)

Abstract

Keywords

checklists; patch verification; security automation; security checklists; security configuration; Security Content Automation Protocol (SCAP); software flaws; vulnerabilities
Control Families

None selected