OSCAL Viewer (opens in a new tab)
A React application for viewing OSCAL Catalogs, Profiles, SSPs, and Component Definitions
What is OSCAL?
NIST’s Open Security Controls Assessment Language (OSCAL) is a machine-readable language that standardizes control-based risk assessments, enabling a shift from slow, costly compliance to automated, data-centric lifecycle management. By supporting automation, OSCAL shortens audit timelines, reduces human error, and accelerates compliance with evolving regulations.
OSCAL Foundation
The OSCAL Foundation is a non-profit organization dedicated to encouraging OSCAL adoption and implementation, advancing OSCAL expertise and experience, and facilitating dialogue between industry and government stakeholders.
Our open-source OSCAL innovations
OSCAL Content Registry (opens in a new tab)
A centralized platform dedicated to the storage, management, and dissemination of OSCAL models
Our OSCAL solution accelerators
High-Octane Compliance
Forge combines developer-friendly UI and automation to rapidly convert compliance docs into standardized OSCAL format
Next Generation cATO
Our OSCAL-powered cATO accelerator delivers a custom framework for continuously monitoring compliance efforts
Learn more about what we do best
Enterprise ICAM
Confidently manage identities, credentials, and access across your entire digital landscape
Cloud Modernization
Modernize your mission with agile delivery, automation, and compliance-first design
Automation
Close the gap between speed and security with transparent, human-centered automation
Zero Trust
Convert federal mandates into mission outcomes with expert zero trust implementation
Risk Management
Defend your mission from every angle with a fine-tuned risk management strategy