Newly Released STIGs:

  • January –
    • Xylok Security Suite 20.x STIG – Ver1, Rel 1
    • Cisco ACI Draft STIG – Ver 1, Rel 0.1
  • December –
    • Zebra Android 13 STIG
    • Dell OS10 Switch STIG
    • CloudLinux AlmaLinux OS9 STIG – Ver 1, Rel 1
  • November –
    • Anduril NixOS STIG – Ver 1, Rel 1
    • HYCU Protege STIG – Ver 1, Rel 1
  • Microsoft Windows Server DNS – This STIG will be used for all Windows DNS servers, whether they are Active   Directory (AD)- integrated, authoritative file-backed DNS zones, a hybrid of both, or a recursive caching server. This STIG must also be used for Windows DNS servers that are a secondary name server for zones whose master authoritative server is non-Windows
  • Enterprise Voice, Video, and Messaging SRG – This SRG is used for all implementations of VoIP and legacy telephony network integration, Video Teleconferencing and Calling, and collaboration software that integrates with Voice and Video features. The EVVM SRG replaces the Voice, Video, and VoIP STIGs currently in sunset. The Voice, Video, and VoIP STIGs must not be used and will be retired and removed from Cyber Exchange.
  Title Size Updated
Apache Tomcat Application Server 9 STIG - Ver 3, Rel 2 Apache Tomcat Application Server 9 STIG - Ver 3, Rel 2
2025 04 07
Application Server SRG - Ver 4, Rel 3 Application Server SRG - Ver 4, Rel 3
2025 04 07
HYCU Protégé STIG - Ver 1, Rel 1 HYCU Protégé STIG - Ver 1, Rel 1
2024 11 01
IBM WebSphere Liberty Server STIG - Ver 2, Rel 2 IBM WebSphere Liberty Server STIG - Ver 2, Rel 2
2025 04 07
IBM WebSphere Traditional V9.x STIG Version 1 IBM WebSphere Traditional V9.x STIG Version 1
2019 06 26
IBM WebSphere Traditional V9.x STIG Version 1 Release Memo IBM WebSphere Traditional V9.x STIG Version 1 Release Memo
2019 06 26
JBoss Enterprise Application Platform 6.3 STIG - Ver 2, Rel 6 JBoss Enterprise Application Platform 6.3 STIG - Ver 2, Rel 6
2025 04 07
Microsoft Exchange 2016 STIG Microsoft Exchange 2016 STIG
2025 01 28
Microsoft Exchange 2019 STIG Microsoft Exchange 2019 STIG
2025 01 28
  Tomcat AS 6.x STIG Tomcat AS 6.x STIG
There are no current plans to develop a STIG. Please use the current Tomcat Application Server 9 STIG.
2019 05 15
  Tomcat AS 7.x STIG Tomcat AS 7.x STIG
There are no current plans to develop a STIG. Please use the current Tomcat Application Server 9 STIG.
2019 05 15
  Tomcat AS 8.x STIG Tomcat AS 8.x STIG
There are no current plans to develop a STIG. Please use the current Tomcat Application Server 9 STIG.
2019 05 15
STIG Topics