Home » Products » SCAP Sync » Got SCAP? Use SCAP Sync to Get the Most Out of Vulnerability Updates

Got SCAP? Use SCAP Sync to Get the Most Out of Vulnerability Updates

Do you enjoy having your daily news delivered in the form of an XML schema? Well, unless you’re a machine, you probably don’t. While extensible markup language is great for easy interchange of information online, it isn’t exactly reader-friendly in its raw form. You either need a working knowledge of the format or lots of patience to find what you need from an XML document.

And yet, if you’re a security professional who has encountered SCAP data in some capacity, you likely have had to slog through XML just to find the vulnerability information and updates you need. In fact, you probably have had to visit a number of websites before even locating the necessary files.

Not exactly the most efficient work situation.

Lunarline developed SCAP Sync in part to improve this situation. Serving as both a search engine and centralized repository, SCAP Sync crawls multiple websites and pulls SCAP data into a single location, making it easy to find vulnerability information in a clean and user-friendly format.

And that’s not all. System integrators and developers who use SCAP data in their own automated solutions will find a lot to love about SCAP Sync as well.

In the past, integrating up-to-date SCAP data presented a major challenge. Locating a single update required downloading a large file with thousands of entries. And any one of these entries could quickly be made obsolete following an update from NIST or MITRE. Now, however, any developer can easily pull individual entries in to their own programs using the SCAP Sync REST API. And since SCAP Sync works by scanning sites for the latest updates, developers can rest assured that they always have the most relevant version of any given entry.

Ultimately, by enabling automated programs to store and exchange security data more easily, SCAP offers lots of potential for keeping security professionals updated on the latest vulnerabilities. SCAP Sync helps to demystify that information and make it more flexible so it can be used to its full potential.

The tool is free to use, so there’s no need to delay. Give SCAP Sync a try today, and see what it can do for your organization’s cyber security efforts.

About Spence Witten

Spence has somehow survived ten years at start-ups and small businesses without suffering a (major) nervous breakdown. As Lunarline's Director of Federal Sales, Spence actually loves working on proposals. If there were any doubt, this is proof that he is in fact certifiably insane. While his title says "Sales" Lunarline doesn't let him off that easy. We make him do real work, too. Luckily he's a recognized subject matter expert in security policy and loves helping clients navigate their way around tricky security compliance standards. He's also been known to lead a software development initiative or two, though that pretty much always ends poorly for everyone involved. He can be reached at spence.witten@lunarline.com.