Tools

• nessus

• nmap

• Security Content Automation Protocol (SCAP) compliance checker

• Security Technical Implementation Guides (STIG) -> stigviewer