STIG Benchmarks

Operating Systems

STIG Linux Benchmark Availability

Benchmark	Maintained	Remediate	Audit	Release
AMAZON2023-STIG	True	True	True
RHEL8-STIG	True	True	True
RHEL9-STIG	True	True	True
RHEL10-STIG	True	True	True
UBUNTU22-STIG	True	True	True
UBUNTU24-STIG	True	True	True
UBUNTU26-STIG	True	WIP	WIP

STIG Windows Benchmark Availability

Benchmark	Maintained	Remediate	Audit	Release
Windows-11-STIG	True	True	SCC
Windows-2019-STIG	True	True	False
Windows-2022-STIG	True	True	SCC
Windows-2025-STIG	True	True	SCC

Note

The Windows STIG roles have no Lockdown audit repository. SCC means the role scans the host itself with the SCAP Compliance Checker (built by NIWC Atlantic, distributed by DISA) before and after remediation. See Windows STIG Roles: SCAP Compliance Checker.

Networking

STIG Hardware Benchmark Availability

Benchmark	Maintained	Remediate	Audit	Release
Cisco-IOS-L2S	True	True	False
Cisco-IOS-RTR	True	True	False	N/A

Applications

STIG Application Benchmark Availability

Benchmark	Maintained	Remediate	Audit	Release
AAP2-STIG	True	True	False
Apache-2.4-STIG	True	True	False
TOMCAT-9-STIG	True	True	False
WinFWADV-STIG	True	True	True
KUBERNETES-STIG	True	True	False

Archived Roles

STIG Retired Benchmark

Benchmark	Maintained	Remediate	Audit	Release
RHEL5-STIG	False	True	False	N/A
RHEL6-STIG	False	True	False
RHEL7-STIG	False	True	True
UBUNTU18-STIG	False	True	False
UBUNTU20-STIG	False	True	False
Windows-2008R2-Member-Server-STIG	False	True	False	N/A
Windows-2012-Member-Server-STIG	False	True	False	N/A
Windows-2012-Domain-Controller-STIG	False	True	False	N/A
Windows-2016-STIG	False	True	False
Windows-10-STIG	False	True	False
Postgres-9-STIG	False	True	False