SCAP

SCAP is a NIST-maintained suite of specifications that lets tools automatically check systems for vulnerabilities and misconfigurations in a standardized, machine-readable way. It bundles component standards like CVE, CVSS, OVAL, and XCCDF so a scanner from one vendor can consume checklists written by another. Manually auditing thousands of machines against security baselines is impossible, so SCAP makes compliance checking automatable and repeatable.