Note: The STIGs converted to NIST SP 800-53 Rev. 5 CCIs in previous quarters have been updated to include the deprecated Rev. 4 CCIs to ensure all vulnerabilities are captured in eMASS.  

 

Unclassified Application STIGs:   

https://cyber.mil/stigs/downloads/?_dl_facet_stigs=app-security  

https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=app-security 

 

Apache Server 2.4 Unix STIG 

Apache Server 2.4 Windows STIG 

Application Security and Development STIG – Ver 6, Rel 2 

Application Server SRG – Ver 4, Rel 2 

Container Platform SRG – Ver 2, Rel 2 

Database SRG – Ver 4, Rel 3 

Dragos Platform 2.x STIG – Ver 1, Rel 2 

MariaDB Enterprise 10.x STIG – Ver 2, Rel 3 

Microsoft .Net Framework 4.0 STIG – Ver 2, Rel 5 

Microsoft Exchange 2016 STIG 

Microsoft Exchange 2019 STIG 

Microsoft Office 365 ProPlus STIG – Ver 3, Rel 2 

Microsoft Office System 2016 STIG – Ver 2, Rel 4 

Microsoft SharePoint 2013 STIG – Ver 2, Rel 4 

Microsoft SQL Server 2016 STIG 

Oracle Database 12c STIG – Ver 3, Rel 3 

Palo Alto Networks Prisma Cloud Compute STIG – Ver 2, Rel 2 

Rancher Government Solutions RKE2 STIG – Ver 2, Rel 3 

Red Hat OpenShift Container Platform 4.12 STIG – Ver 2, Rel 2 

 

 

Unclassified Mobility STIGs and SRGs:   

https://cyber.mil/stigs/downloads/?_dl_facet_stigs=mobility
https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=mobility 

 

Apple iOS/iPadOS 18 STIG – Ver 1, Rel 2 

Google Android 13 STIG 

Google Android 14 STIG 

Google Android 15 STIG 

Samsung Android OS 13 with Knox 3.x STIG 

Samsung Android OS 14 with Knox 3.x STIG 

Samsung Android OS 15 with Knox 3.x STIG 

Unified Endpoint Management Server SRG 

 

 

Unclassified Network STIGs and SRGs:   

https://cyber.mil/stigs/downloads/?_dl_facet_stigs=network-perimeter-wireless  

https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=network-perimeter-wireless 

 

Application Layer Gateway SRG – Ver 2, Rel 2 

Authentication, Authorization, and Accounting Services (AAA) SRG – Ver 2, Rel 2 

Central Log Server SRG – Ver 3, Rel 2 

Cisco IOS Router STIG 

Cisco IOS Switch STIG 

Cisco IOS XE Router STIG 

Cisco NX OS Switch STIG 

Firewall SRG – Ver 3, Rel 2 

Forescout STIG 

Intrusion Detection and Prevention System Technology SRG – Ver 3, Rel 2 

Juniper Router STIG 

Juniper SRX Services Gateway STIG 

Palo Alto Networks STIG 

Virtual Private Network (VPN) SRG – Ver 3, Rel 3 

VMware NSX 4.x STIG 

 

 

Unclassified Operating System STIGs:   

https://cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems 

https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems 

 

Apple macOS 14 (Sonoma) STIG – Ver 2, Rel 3 

Apple macOS 15 (Sequoia) STIG – Ver 1, Rel 2 

Canonical Ubuntu 22.04 LTS STIG – Ver 2, Rel 3 

General Purpose Operating System SRG – Ver 3, Rel 2 

IBM z/OS STIG 

IBM zSecure Suite STIG – Ver 1, Rel 2 

Mainframe Product SRG – Ver 3, Rel 3 

Microsoft Windows 10 STIG – Ver 3, Rel 3 

Microsoft Windows Server 2022 STIG – Ver 2, Rel 3 

Oracle Linux 8 STIG – Ver 2, Rel 3 

Red Hat Enterprise Linux 8 STIG – Ver 2, Rel 2 

Red Hat Enterprise Linux 9 STIG – Ver 2, Rel 3 

Solaris 11 SPARC STIG – Ver 3, Rel 2 

Solaris 11 x86 STIG – Ver 3, Rel 2 

SUSE Linux Enterprise Server 12 STIG – Ver 3, Rel 2 

SUSE Linux Enterprise Server 15 STIG – Ver 2, Rel 3 

Virtual Machine Manager SRG – Ver 2, Rel 2 

VMware vSphere 7.0 STIG 

VMware vSphere 8.0 STIG 

z/OS ACF2 Products 

z/OS RACF Products 

z/OS SRR Scripts 

z/OS TSS Products STIG 

 

 

Unclassified Uncategorized STIGs: 

https://public.cyber.mil/stigs/downloads/ 

https://cyber.mil/stigs/downloads 

 

Cloud Computing SRG (also available at https://cyber.mil/dccs/dccs-documents/ and https://public.cyber.mil/dccs/dccs-documents/) 

 

 

Sunset STIGs:  

https://cyber.mil/stigs/downloads/?_dl_facet_stigs=sunset 

https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=sunset 

 

Sunset – Apple macOS 13 (Ventura) STIG – Ver 1, Rel 5 

Sunset – F5 BIG-IP STIG 

Sunset – IBM Aspera Platform 4.2 STIG – Ver 1, Rel 3 

Sunset – McAfee Application Control 7.x STIG – Ver 1, Rel 4 

Sunset – Microsoft Groove 2013 STIG – Ver 1, Rel 4 

Sunset – Microsoft OneNote 2010 STIG – Ver 1, Rel 10 

Sunset – Microsoft OneNote 2013 STIG – Ver 1, Rel 4 

Sunset – Microsoft Outlook 2010 STIG – Ver 1, Rel 14 

Sunset – Microsoft Outlook 2013 STIG – Ver 1, Rel 14 

Sunset – Multifunction Device and Network Printers STIG – Ver 2, Rel 15 

Sunset – Oracle HTTP Server 12.1.3 STIG – Ver 2, Rel 3 

Sunset – Oracle WebLogic Server 12c STIG – Ver 2, Rel 2 

Sunset – Storage Area Network STIG – Ver 2, Rel 5 

 

 

Benchmarks:  

https://cyber.mil/stigs/downloads/?_dl_facet_stigs=scap 

https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=scap 

 

Adobe Acrobat Reader DC Continuous Track STIG Benchmark – Ver 2, Rel 3 

Canonical Ubuntu 20.04 LTS STIG Benchmark – Ver 2, Rel 2 

Microsoft Office 365 ProPlus STIG Benchmark – Ver 3, Rel 3 

Microsoft Windows 10 STIG Benchmark – Ver 3, Rel 3 

Microsoft Windows 11 STIG Benchmark – Ver 2, Rel 3 

Microsoft Windows Server 2019 STIG Benchmark – Ver 3, Rel 3 

Microsoft Windows Server 2022 STIG Benchmark – Ver 2, Rel 3 

Oracle Linux 8 STIG Benchmark – Ver 2, Rel 3 

Red Hat Enterprise Linux 8 STIG Benchmark – Ver 2, Rel 2 

Red Hat Enterprise Linux 9 STIG Benchmark – Ver 2, Rel 3 

SUSE Linux Enterprise Server 12 STIG Benchmark – Ver 3, Rel 2 

SUSE Linux Enterprise Server 15 STIG Benchmark – Ver 2, Rel 3 

 

 

Supplemental Automation Content: 

https://cyber.mil/stigs/supplemental-automation-content/ 

https://public.cyber.mil/stigs/supplemental-automation-content/ 

 

Oracle Linux 8 STIG for Ansible – Ver 2, Rel 3 

Red Hat Enterprise Linux 8 STIG for Ansible – Ver 2, Rel 2 

Red Hat Enterprise Linux 9 STIG for Ansible- Ver 2, Rel 3 

SUSE Linux Enterprise Server 15 for Ansible – Ver 2, Rel 3