Download a complete STIG export | Open Controls Developer Docs

{
  "id": 123,
  "benchmarkId": "Windows_Server_2022",
  "slug": "windows-server-2022",
  "status": "accepted",
  "statusDate": "2024-09-13",
  "title": "Windows Server 2022 Security Technical Implementation Guide",
  "description": "Microsoft Windows Server 2022 security benchmark.",
  "version": "1",
  "createdAt": "2026-03-16T00:00:00.000Z",
  "updatedAt": "2026-03-16T00:00:00.000Z",
  "groups": [
    {
      "id": 456,
      "benchmarkId": 123,
      "groupId": "V-254123",
      "title": "Group title",
      "description": "Group description",
      "ruleId": "SV-254123r123456_rule",
      "ruleWeight": "10.0",
      "ruleSeverity": "high",
      "ruleVersion": "SRG-OS-000001-GPOS-00001",
      "ruleTitle": "Windows Server 2022 must enforce an example control.",
      "ruleVulnDiscussion": "Discussion text.",
      "ruleFalsePositives": "False positives text.",
      "ruleFalseNegatives": "False negatives text.",
      "ruleDocumentable": "documentable",
      "ruleMitigations": "Mitigation text.",
      "ruleIdent": "CCI-000001",
      "ruleFixText": "Fix text.",
      "ruleFixId": "F-000001r1_fix",
      "ruleCheckSystem": "http://example.com/check-system",
      "ruleCheckContent": "Check content.",
      "createdAt": "2026-03-16T00:00:00.000Z",
      "updatedAt": "2026-03-16T00:00:00.000Z"
    }
  ],
  "profiles": [
    {
      "id": 10,
      "benchmarkId": 123,
      "profileId": "MAC-1_Classified",
      "title": "MAC-1 Classified",
      "description": "Example profile.",
      "createdAt": "2026-03-16T00:00:00.000Z",
      "updatedAt": "2026-03-16T00:00:00.000Z"
    }
  ]
}

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Path parameters

slugstringRequired

Unique STIG benchmark slug

Query parameters

formatenumOptionalDefaults to json

Export format. Defaults to json.

Allowed values:

Response headers

Content-Dispositionstring

Suggested filename for the exported artifact

Response

STIG export in the requested format

idinteger

benchmarkIdstring

slugstring

statusenum

statusDatedate

titlestring

descriptionstring

versionstring

createdAtdatetime

updatedAtdatetime

groupslist of objects

profileslist of objects

Errors

400

Bad Request Error

401

Unauthorized Error

404

Not Found Error

500

Internal Server Error

$	curl https://www.stigviewer.com/api/v1/stigs/slug/download \
>	-H "Authorization: Bearer <token>"