Skip to main content
FOSSA Logo
X
Compliance
Security
Standards
Configuration Management

XCCDF (Extensible Configuration Checklist Description Format)

A standardized XML-based specification language for writing security checklists, benchmarks, and related documents that enable automated vulnerability management and security compliance testing.

Written by FOSSA Editorial TeamReviewed by FOSSA Editorial TeamLast reviewed

See your software supply chain in full

FOSSA maps every open source dependency, license, and vulnerability across your codebase, so the terms on this page become findings you can act on.