Lunarline Releases SCAP Sync, A New Search Engine and Repository for SCAP Content
ARLINGTON, Va., Aug. 8, 2012 /PRNewswire/ — Lunarline, Inc, today released its latest tool SCAP Sync, which is a search engine and repository for Security Content Automation Protocol (SCAP) content. SCAP Sync synchronizes SCAP content on a daily basis, then syndicates that content in a number of user-friendly and machine-readable formats. The goal is to make SCAP more relevant and usable for everyday security practitioners and application developers.
SCAP is a suite of standards and a body of content developed by NIST, MITRE, and various other organizations. SCAP is aimed at improving the ability for automated programs to generate, exchange, and store security-related data including assets, configurations, vulnerabilities, policies, and checklists. In the past, this data has been distributed through a collection of disparate websites that each contained separate sets of data in large Extensible Markup Language (XML) files. Interested parties had to download each file and check regularly for small changes.
SCAP Sync provides a single point of access for all SCAP content through a web search portal and a Representational State Transfer Application Programming Interface (REST API) that developers can use to integrate the content into their own applications. By crawling multiple SCAP content websites and keeping track of daily updates to individual pieces of SCAP content, SCAP Sync eliminates the need for in-depth technical knowledge of SCAP and XML. Both technical and non-technical users can find SCAP content quickly and within relevant context, providing answers to questions ranging from executives asking, “Will the vulnerability on the front page of today’s newspaper matter for my organization?” to application developers looking for sample code that demonstrates a specific vulnerability or weakness.
Future development efforts will leverage the feature set of SCAP Sync into Lunarline’s other product offerings such as the Continuous Compliance Monitoring and Reporting (CCMR) platform.
Lunarline requests community and user feedback through their blog.
Lunarline is a leading cyber security and privacy provider to the US Federal Government, as well as private industry. Our unique approach to cyber security combines our proven products, specialized services, and certified training together as a complete solution customized for the success of your cyber mission. Lunarline is an accredited FedRAMP Third Party Assessment Organization (3PAO).
LUNARLINE: SOLUTIONS BUILT ON SECURITY(TM)
For more information, visit www.lunarline.com.
Carolyn Morse, Media Relations
SOURCE Lunarline, Inc.