Hi Josh, Feel free to try out jOVAL: http://joval.org/download We have excellent support for scanning OSX locally and remotely, and iOS via plist profile. If you have any questions, just let me know. -David Ries On 5/31/2013 11:03 AM, Haynes, Dan wrote:

Hi Josh,

The SPAWAR SCC tool is limited to U.S. government agencies and supporting contractors. I will put you in touch with the SPAWAR team to see if you are eligible.

If not, there are quite a few other tools available (some commercial and some open source). You can find them at the following links.

http://nvd.nist.gov/scapproducts.cfm

http://oval.mitre.org/adoption/productlist.html

Thanks,

Danny

*From:*scap-on-apple-dev-bounces@lists.macosforge.org [mailto:scap-on-apple-dev-bounces@lists.macosforge.org] *On Behalf Of *Josh Wisenbaker *Sent:* Friday, May 31, 2013 11:52 AM *To:* scap-on-apple-dev@lists.macosforge.org *Subject:* [SCAP-On-Apple-Dev] Anyone have access to the DISA SCAP scanner?

Does anyone have access to the SCC 3.1 that is posted on the DISA page here? <http://iase.disa.mil/stigs/scap/index.html>

From the screenshots I've seen it looks like a Java tool.

Josh

--

Josh Wisenbaker

Consulting Engineer - Apple U.S. Commercial and Governmental Sales

dubs@apple.com <mailto:dubs@apple.com>

_______________________________________________ SCAP-On-Apple-Dev mailing list SCAP-On-Apple-Dev@lists.macosforge.org https://lists.macosforge.org/mailman/listinfo/scap-on-apple-dev

-David -- David E. Ries /Partner/ Farnam Hall Ventures farnamhallventures.com <http://farnamhallventures.com>