Newly Released STIGs:

  • January –
    • Xylok Security Suite 20.x STIG – Ver1, Rel 1
    • Cisco ACI Draft STIG – Ver 1, Rel 0.1
  • December –
    • Zebra Android 13 STIG
    • Dell OS10 Switch STIG
    • CloudLinux AlmaLinux OS9 STIG – Ver 1, Rel 1
  • November –
    • Anduril NixOS STIG – Ver 1, Rel 1
    • HYCU Protege STIG – Ver 1, Rel 1
  • Microsoft Windows Server DNS – This STIG will be used for all Windows DNS servers, whether they are Active   Directory (AD)- integrated, authoritative file-backed DNS zones, a hybrid of both, or a recursive caching server. This STIG must also be used for Windows DNS servers that are a secondary name server for zones whose master authoritative server is non-Windows
  • Enterprise Voice, Video, and Messaging SRG – This SRG is used for all implementations of VoIP and legacy telephony network integration, Video Teleconferencing and Calling, and collaboration software that integrates with Voice and Video features. The EVVM SRG replaces the Voice, Video, and VoIP STIGs currently in sunset. The Voice, Video, and VoIP STIGs must not be used and will be retired and removed from Cyber Exchange.
  Title Size Updated
Adobe Acrobat Professional DC Continuous Track STIG - Ver 2, Rel 1 Adobe Acrobat Professional DC Continuous Track STIG - Ver 2, Rel 1
2021 07 26
Adobe Acrobat Reader DC Continuous Track STIG - Ver 2, Rel 1 Adobe Acrobat Reader DC Continuous Track STIG - Ver 2, Rel 1
2021 07 26
Apache Server 2.4 Unix STIG Apache Server 2.4 Unix STIG
2025 04 07
Apache Server 2.4 Windows STIG Apache Server 2.4 Windows STIG
2025 04 07
Apache Tomcat Application Server 9 STIG - Ver 3, Rel 2 Apache Tomcat Application Server 9 STIG - Ver 3, Rel 2
2025 04 07
Application Security and Development STIG - Ver 6, Rel 3 Application Security and Development STIG - Ver 6, Rel 3
2025 04 07
Application Server SRG - Ver 4, Rel 3 Application Server SRG - Ver 4, Rel 3
2025 04 07
AvePoint Compliance Guardian STIG - Ver 1, Rel 1 AvePoint Compliance Guardian STIG - Ver 1, Rel 1
2023 03 07
AvePoint DocAve 6 STIG - Ver 1, Rel 2 AvePoint DocAve 6 STIG - Ver 1, Rel 2
2022 08 24
CA IDMS STIG - Ver 2, Rel 1 CA IDMS STIG - Ver 2, Rel 1
2024 10 23
Citrix Virtual Apps and Desktops (VAD) 7.x STIG Citrix Virtual Apps and Desktops (VAD) 7.x STIG
2022 01 24
Citrix XenDesktop 7.x STIG Citrix XenDesktop 7.x STIG
2020 04 23
Container Platform SRG - Ver 2, Rel 2 Container Platform SRG - Ver 2, Rel 2
2025 01 28
Crunchy Data Postgres 16 STIG - Ver 1, Rel 1 Crunchy Data Postgres 16 STIG - Ver 1, Rel 1
2024 06 20
Crunchy Data PostgreSQL STIG - Ver 3, Rel 1 Crunchy Data PostgreSQL STIG - Ver 3, Rel 1
2024 07 17
Database SRG - Ver 4, Rel 3 Database SRG - Ver 4, Rel 3
2025 01 28
Dragos Platform 2.x STIG - Ver 1, Rel 2 Dragos Platform 2.x STIG - Ver 1, Rel 2
2025 01 28
EnterpriseDB Postgres Advanced Server (EPAS) STIG - Ver 2, Rel 1 EnterpriseDB Postgres Advanced Server (EPAS) STIG - Ver 2, Rel 1
2024 07 17
Google Chrome STIG - Ver 2, Rel 10 Google Chrome STIG - Ver 2, Rel 10
2024 10 23
HYCU Protégé STIG - Ver 1, Rel 1 HYCU Protégé STIG - Ver 1, Rel 1
2024 11 01
IBM DB2 V10.5 STIG - Ver 2, Rel 1 IBM DB2 V10.5 STIG - Ver 2, Rel 1
2023 07 20
IBM WebSphere Liberty Server STIG - Ver 2, Rel 2 IBM WebSphere Liberty Server STIG - Ver 2, Rel 2
2025 04 07
IBM WebSphere Traditional V9.x STIG Version 1 IBM WebSphere Traditional V9.x STIG Version 1
2019 06 26
IBM WebSphere Traditional V9.x STIG Version 1 Release Memo IBM WebSphere Traditional V9.x STIG Version 1 Release Memo
2019 06 26
JBoss Enterprise Application Platform 6.3 STIG - Ver 2, Rel 6 JBoss Enterprise Application Platform 6.3 STIG - Ver 2, Rel 6
2025 04 07
Kubernetes STIG - Ver 2, Rel 3 Kubernetes STIG - Ver 2, Rel 3
2025 04 07
MariaDB Enterprise 10.x STIG - Ver 2, Rel 3 MariaDB Enterprise 10.x STIG - Ver 2, Rel 3
2025 01 28
MarkLogic Server v9 STIG - Ver 3, Rel 2 MarkLogic Server v9 STIG - Ver 3, Rel 2
2024 10 23
Microsoft .Net Framework Security Checklist - Ver 1, Rel 3 Microsoft .Net Framework Security Checklist - Ver 1, Rel 3
2016 04 22
Microsoft Access 2016 STIG - Ver 1, Rel 1 Microsoft Access 2016 STIG - Ver 1, Rel 1
2018 12 01
Microsoft Azure SQL Database STIG - Ver 2, Rel 2 Microsoft Azure SQL Database STIG - Ver 2, Rel 2
2024 10 23
Microsoft Defender Antivirus STIG - Ver 2, Rel 4 Microsoft Defender Antivirus STIG - Ver 2, Rel 4
2022 05 25
Microsoft DotNet Framework 4.0 STIG - Ver 2, Rel 6 Microsoft DotNet Framework 4.0 STIG - Ver 2, Rel 6
2025 04 07
Microsoft Edge STIG - Ver 2, Rel 2 Microsoft Edge STIG - Ver 2, Rel 2
2024 10 23
Microsoft Excel 2016 STIG - Ver 2, Rel 1​ Microsoft Excel 2016 STIG - Ver 2, Rel 1​
2024 04 22
Microsoft Exchange 2016 STIG Microsoft Exchange 2016 STIG
2025 01 28
Microsoft Exchange 2019 STIG Microsoft Exchange 2019 STIG
2025 01 28
Microsoft IIS 10.0 STIG Microsoft IIS 10.0 STIG
2025 04 10
Microsoft Internet Explorer 11 STIG - Ver 2, Rel 5 Microsoft Internet Explorer 11 STIG - Ver 2, Rel 5
2024 01 22
Microsoft Office 365 ProPlus STIG - Ver 3, Rel 3 Microsoft Office 365 ProPlus STIG - Ver 3, Rel 3
2025 04 07
Microsoft Office System 2016 STIG - Ver 2, Rel 4 Microsoft Office System 2016 STIG - Ver 2, Rel 4
2025 01 28
Microsoft OneDrive STIG - Ver 2, Rel 3 Microsoft OneDrive STIG - Ver 2, Rel 3
2023 07 20
Microsoft OneNote 2016 STIG - Ver 1, Rel 2 Microsoft OneNote 2016 STIG - Ver 1, Rel 2
2018 12 01
Microsoft Outlook 2016 STIG - Ver 2, Rel 3 Microsoft Outlook 2016 STIG - Ver 2, Rel 3
2022 04 19
Microsoft PowerPoint 2016 STIG - Ver 1, Rel 1 Microsoft PowerPoint 2016 STIG - Ver 1, Rel 1
2018 12 01
Microsoft Project 2016 STIG - Ver 1, Rel 1 Microsoft Project 2016 STIG - Ver 1, Rel 1
2018 12 01
Microsoft Publisher 2016 STIG - Ver 1, Rel 3 Microsoft Publisher 2016 STIG - Ver 1, Rel 3
2018 12 01
Microsoft SharePoint 2013 STIG - Ver 2, Rel 4 Microsoft SharePoint 2013 STIG - Ver 2, Rel 4
2025 01 28
Microsoft Sharepoint Designer 2013 STIG - Ver 1, Rel 3 Microsoft Sharepoint Designer 2013 STIG - Ver 1, Rel 3
2018 12 01
Microsoft Skype for Business 2016 STIG - Ver 1, Rel 1 Microsoft Skype for Business 2016 STIG - Ver 1, Rel 1
2018 12 01
Microsoft SQL Server 2016 STIG Microsoft SQL Server 2016 STIG
2025 04 07
Microsoft SQL Server 2022 Draft STIG - Ver 1, Rel 0.1 Microsoft SQL Server 2022 Draft STIG - Ver 1, Rel 0.1
2025 01 23
Microsoft SQL Server 2022 Draft STIG Comment Matrix Microsoft SQL Server 2022 Draft STIG Comment Matrix
2025 01 23
Microsoft Visio 2016 STIG - Ver 1, Rel 1 Microsoft Visio 2016 STIG - Ver 1, Rel 1
2018 12 01
Microsoft Word 2016 STIG - Ver 1, Rel 1 Microsoft Word 2016 STIG - Ver 1, Rel 1
2018 12 01
Mirantis Kubernetes Engine STIG - Ver 2, Rel 1 Mirantis Kubernetes Engine STIG - Ver 2, Rel 1
2024 07 17
MongoDB 7.x STIG - Ver 1, Rel 1 MongoDB 7.x STIG - Ver 1, Rel 1
2024 10 01
Mozilla Firefox STIG - Ver 6, Rel 5 Mozilla Firefox STIG - Ver 6, Rel 5
2023 07 20
Oracle Database 12c STIG - Ver 3, Rel 4 Oracle Database 12c STIG - Ver 3, Rel 4
2025 04 07
Oracle Database 19c STIG - Ver 1, Rel 1 Oracle Database 19c STIG - Ver 1, Rel 1
2025 02 21
Oracle MySQL 8.0 STIG - Ver 2, Rel 2 Oracle MySQL 8.0 STIG - Ver 2, Rel 2
2024 10 23
Palo Alto Networks Prisma Cloud Compute STIG - Ver 2, Rel 2 Palo Alto Networks Prisma Cloud Compute STIG - Ver 2, Rel 2
2025 01 28
Rancher Government Solutions Multi-Cluster Manager STIG - Ver 2, Rel 1 Rancher Government Solutions Multi-Cluster Manager STIG - Ver 2, Rel 1
2024 07 17
Rancher Government Solutions RKE2 STIG - Ver 2, Rel 3 Rancher Government Solutions RKE2 STIG - Ver 2, Rel 3
2025 01 28
Red Hat Ansible Automation Controller STIG Red Hat Ansible Automation Controller STIG
2024 10 23
Red Hat OpenShift Container Platform 4.12 STIG - Ver 2, Rel 2 Red Hat OpenShift Container Platform 4.12 STIG - Ver 2, Rel 2
2025 01 28
Redis Enterprise 6.x STIG - Ver 2, Rel 2 Redis Enterprise 6.x STIG - Ver 2, Rel 2
2024 10 23
SPEC Innovations Innoslate 4.x STIG - Ver 1, Rel 1 SPEC Innovations Innoslate 4.x STIG - Ver 1, Rel 1
2022 09 28
Tanium 7.x STIG - Ver 2, Rel 2 Tanium 7.x STIG - Ver 2, Rel 2
2025 04 07
Tanium 7.x TanOS STIG Tanium 7.x TanOS STIG
2025 04 07
  Tomcat AS 6.x STIG Tomcat AS 6.x STIG
There are no current plans to develop a STIG. Please use the current Tomcat Application Server 9 STIG.
2019 05 15
  Tomcat AS 7.x STIG Tomcat AS 7.x STIG
There are no current plans to develop a STIG. Please use the current Tomcat Application Server 9 STIG.
2019 05 15
  Tomcat AS 8.x STIG Tomcat AS 8.x STIG
There are no current plans to develop a STIG. Please use the current Tomcat Application Server 9 STIG.
2019 05 15
  Update to DoD CIO Memo on Commercial Public Key Infrastructure Certificates on Public-Facing DoD Websites Update to DoD CIO Memo on Commercial Public Key Infrastructure Certificates on Public-Facing DoD Websites
This memorandum, signed on November 8, 2021, updates and replaces DoD CIO Memorandum "Commercial Public Key Infrastructure Certificates on Public-Facing DoD Websites" dated November 6, 2020. It provides guidance on the use of commercial TLS and code signing PKI certificates on public-facing DoD websites and services.
2023 03 10
Web Server SRG - Ver 4, Rel 3 Web Server SRG - Ver 4, Rel 3
2025 04 07
Xylok Security Suite 20.x STIG - Ver 1, Rel 1 Xylok Security Suite 20.x STIG - Ver 1, Rel 1
2025 01 23
STIG Topics