Welcome to the Cyber Data Trackr

DoD Cyber Security Compliance requirements present an ever-changing target that needs constant management. Simplify your compliance processes with the latest DISA and NIST security requirements in an easy to use and searchable format.

RMF DIACAP STIGs SCAPs CCIs
  • Latest STIGs / SCAPs

  • Release Date Title Version
    2019-01-25 SCAP - Google Chrome Current Windows V001.011R1
    2019-01-25 SCAP - Windows Server 2012/2012 R2 Domain Controller V002.015R2
    2019-01-25 SCAP - Windows Server 2016 V001.008R1
    2019-01-25 SCAP - Red Hat Enterprise Linux 6 V001.022R1
    2019-01-25 SCAP - Red Hat Enterprise Linux 7 V002.002R2
    2019-01-25 SCAP - Solaris 10 Sparc V001.021R1
    2019-01-25 SCAP - Solaris 10 X86 V001.022R1
    2019-01-16 STIG - Windows 2008 Domain Controller V6R42
    2019-01-16 STIG - Windows Server 2008 R2 Domain Controller V1R29
    2019-01-16 STIG - Windows Server 2012/2012 R2 Domain Controller V2R15
    2019-01-16 STIG - Windows Server 2016 V1R7
    2019-01-09 STIG - Microsoft Exchange 2016 Mailbox Server V1R2
    2019-01-09 STIG - Infrastructure L3 Switch V8R29
    2019-01-09 STIG - Layer 2 Switch - Cisco V8R27
    2019-01-09 STIG - Voice Video Services Policy V3R15
    2019-01-08 STIG - Hp-ux 11.31 V1R19
    2019-01-08 STIG - Iis 8.5 Server V1R6
    2019-01-08 STIG - Iis 8.5 Site V1R6
    2019-01-08 STIG - Microsoft Sql Server 2012 Database V1R18
    2019-01-08 STIG - Microsoft Sql Server 2012 Instance V1R18
    2019-01-08 STIG - Ms Sharepoint 2013 V1R6
    2019-01-07 STIG - Apache 2.2 Server For Unix V1R11
    2019-01-07 STIG - Apache 2.2 Site For Unix V1R11
    2019-01-07 STIG - Application Server Security Requirements Guide V2R5
    2019-01-07 STIG - Bind 9.x V1R5
    2019-01-07 STIG - Layer 2 Switch Security Requirements Guide V1R3
    2019-01-04 STIG - Windows 10 V1R16
    2019-01-04 STIG - Microsoft Windows 2008 Server Domain Name System V1R5
    2019-01-04 STIG - Microsoft Windows 2012 Server Domain Name System V1R11
    2019-01-04 STIG - Multifunction Device And Network Printers V2R13
    2019-01-04 STIG - Oracle Database 12c V1R12
    2019-01-04 STIG - Oracle Http Server 12.1.3 V1R5
    2019-01-04 STIG - Palo Alto Networks Alg V1R4
    2019-01-04 STIG - Palo Alto Networks Idps V1R2
    2019-01-04 STIG - Vmware Vsphere Esxi 6.0 V1R5
    2019-01-03 STIG - Ms Sql Server 2016 Instance V1R4
    2019-01-02 STIG - General Purpose Operating System Srg V1R5
    2019-01-02 STIG - Jboss Eap 6.3 V1R3
    2019-01-02 STIG - Ms Exchange 2010 Edge Transport Server V1R14
    2019-01-02 STIG - Ms Exchange 2013 Client Access Server V1R2
    2019-01-02 STIG - Ms Exchange 2013 Edge Transport Server V1R4
    2019-01-02 STIG - Ms Exchange 2013 Mailbox Server V1R3
    2019-01-02 STIG - Ms Sharepoint 2010 V1R9
    2019-01-02 STIG - Mcafee Vsel 1.9/2.0 Local Client V1R3
    2019-01-02 STIG - Mozilla Firefox V4R24
    2018-12-24 STIG - Application Security And Development V4R9
    2018-12-24 STIG - Apache 2.2 Server For Windows V1R13
    2018-12-24 STIG - Apache 2.2 Site For Windows V1R13
    2018-12-24 STIG - Apple Os X 10.12 V1R4
    2018-12-24 STIG - Firewall Security Requirements Guide V1R3
    • Notices:

    • This web site uses advanced JavaScript for several data processing functions. Internet Explorer has severe deficiencies in it's JavaScript engine. Please use a modern day browser, such as Chrome or Edge, in order to take full advantage of this web site.
    • The content on this site is based off of quarterly data dumps from DISA and from publicly available information from NIST. All updates and data loads will be documented in the change log below.

    • Change Log:

    • 2-10-2019:
      • Added linked RMF and DIACAP controls to CCI tab
    • 2-9-2019:
      • Created a Standalone Bundle of this site available on the Utilities tab
      • Updates to the Scans to POAM Module
        • Added filters to the Software List to remove unnecessary applications
        • Added a PPSM tab
        • Added an Operating System Count tab
        • Added a Missing Patches tab
        • Fixed a bug on the STIG Data tab
    • 2-3-2019:
      • Added routes to view latest STIGs or SCAPs without specifying version and release in the URL
      • Updates to the Scans to POAM Module
        • Updated the parsing and rendering engine to be more efficient
        • Added Windows software list tab
        • Added C-I-A outputs for RAR tab
        • Added RMF Control Data tab
        • Added applicable STIG Data tab
    • January 2019:
      • 1-30-2019:
        • Fixed DIFF coloring bug for STIG comparison
        • Fixed sorting mechanism for low, medium and high
        • Added search modules for Checks and Fixes
      • 1-29-2019:
        • Bug Fixes and Updates
          • Fixed sorting issue with STIG Releases
          • Added 'No Change' category to Comparison Totals
          • Fixed bug where 'added' and 'removed' were backwards
      • 1-27-2019:
        • Ingested the latest STIGs and SCAPs from DISA
        • Added the option to export STIGs directly to Stig Viewer v2.8 Checklists
        • Added the option to update existing Checklists to the current STIG version on the STIG pages
      • 1-14-2019:
        • Made updates to Scans to Poam module
          • Added data point fill ins
          • Added option to pre-fill SCD dates
          • Added option to Expand hostnames
          • Added option to Condense Test Plan tab to single entries per scan type
          • Added option to automatically lower the Residual Risk
      • 1-12-2019:
        • Added a Traceability Tab to the Scans to Poam module
        • Added new data points (CCI, Security Control, etc.) to the Scans to Poam module
    • December 2018:
      • 12-14-2018:
        • Bug Fixes for the Scans to Poam module
      • 12-8-2018:
        • Ingested STIGs and SCAPs that have dropped since last quarterly release
        • Updated Welcome Page STIG/SCAP listing to show more history
      • 12-5-2018:
        • Bug fixes for the new Scans to Poam utility
      • 12-2-2018:
        • Developed a Scan Files to RAR/POAM Module in the utilities section of the site
        • Fixed a bug preventing the sortable/filterable table from showing up on the STIG/SCAP pages
    • November 2018:
      • 11-24-2018:
        • Regenerated the Benchmark - CCI - Control Crosswalk with updated data pull
        • Added Previous and Next Arrows to the modal windows for the controls, STIGs and SCAPs
        • Added CCI Data Dump page with sortable data table
        • Added recently viewed page widget to navigation bar
      • 11-3-2018:
        • Ingested latest STIGs and SCAPs from DISA
    • October 2018:
      • 10-17-2018:
        • Added a new Crosswalk Download to the SCAP and STIG pages
        • Added an option to download the SCAP XML files
      • 10-16-2018:
        • Added download options for STIGs
        • Updated Contact form to use form mailer
      • 10-11-2018:
        • Updated ingest scripts to handle SCAP 1.1 and 1.2
        • Imported Sunsetted Products
        • Updated Search Engine to search for CCI items related to STIGs and SCAPs
        • Updated Welcome page to differentiate between STIGs and SCAPs
        • Updated SCAP page to properly handle the new Rule and Vulnerability formats
        • Imported missing SCAP and STIG benchmarks from DISA
      • 10-10-2018:
        • Created a Contact Us page
        • Added RMF Version to the heading on the RMF Page
        • Updated search engine to allow searching for RMF Enhancements
        • Updated RMF filters to properly filter the control table
        • Added Enhancement filter buttons to the RMF Control Details page
        • Updated introduction paragraphs on the STIG and SCAP Pages
      • 10-03-2018:
        • Fixed a symbolic link issue that was prevent STIG details from populating
    • September 2018:
      • 9-26-2018:
        • Continued developing the compare function
        • Added more SCAP 1.1 Benchmarks
        • Reseached SCAP 1.2 Changes
      • 9-25-2018:
        • Fixed a bug with the new quote search engine
        • Re-ordered and updated navigation bar
        • Linked SCAP and STIG severity buttons to table filters
        • Added search results for CCI Queries
        • Began working on compare functions
      • 9-24-2018:
        • Fixed HTTPS Global Switch
        • Attached filters to DIACAP and RMF buttons
        • Updated search engine to accept quoted terms