Skip to content
whatismyalternative

OpenSCAP

Open-source tools for system security and standards compliance

Visit OpenSCAP

OpenSCAP is an open-source ecosystem of tools for enforcing security compliance and performing vulnerability assessment on computer systems. It implements the SCAP standard (maintained by NIST) and provides customizable security policies, hardening guides, and configuration baselines. The project is 100% open source and is NIST certified for SCAP 1.2.

12 alternatives to OpenSCAP

Ranked by how well each tool replaces OpenSCAP: shared features, audience, price and popularity.

  1. FOSSA

    Control your software supply chain

    Covers 0 of 8 key features.

    Free plan
    57 out of 100 match$20/mo

  2. ISMS.online

    Feel Compliance Confident with IO

    Covers 1 of 8 key features.

    53 out of 100 matchContact sales

  3. OPNsense

    An open source, feature rich firewall and routing platform, offering cutting-edge network

    Covers 0 of 8 key features.

    Free planOpen source
    51 out of 100 matchFree

  4. Openwall

    Information Security software for open computing environments, related publications, and a

    Covers 1 of 8 key features.

    Free planOpen source
    51 out of 100 matchContact sales

  5. OpenVAS

    Open Vulnerability Assessment Scanner

    Covers 1 of 8 key features.

    Open source
    51 out of 100 match—

  6. Objective-See Foundation

    Objective-See Foundation offers free open-source macOS security tools and community for A

    Covers 1 of 8 key features.

    Free planOpen source
    50 out of 100 matchFree

  7. MetricStream

    GRC software for governance, risk, and compliance programs.

    Covers 1 of 8 key features.

    50 out of 100 match—

  8. ZenGRC

    GRC Software for Multi-Framework Compliance.

    Covers 1 of 8 key features.

    50 out of 100 match—

  9. 6clicks

    Sovereign GRC platform for government, defense, and critical infrastructure, deployable on

    Covers 1 of 8 key features.

    50 out of 100 matchContact sales

  10. Scorechain

    Blockchain analytics and AML compliance platform for crypto risk assessment, transaction,

    Covers 1 of 8 key features.

    49 out of 100 match—

  11. OSSEC

    The most widely used host intrusion detection system

    Covers 0 of 8 key features.

    Free planOpen source
    49 out of 100 match$5/mo

  12. Usercentrics

    Consent management platform for websites, apps, and connected TV, plus privacy policy,

    Covers 1 of 8 key features.

    Free plan
    49 out of 100 match$7/mo