SCAP is a NIST specification for expressing and manipulating security data in standardized ways.

The National Institute of Standards and Technology (NIST) has revised its testing requirements for security products that use the security Content Automation Protocol (SCAP).

SCAP can be used to quickly find known vulnerabilities and to automate activities such as ongoing security monitoring, vulnerability management and security policy compliance evaluation reporting.