Download a complete STIG export | Open Controls Developer Docs

curl https://www.stigviewer.com/api/v1/stigs/slug/download \
     -H "Authorization: Bearer <token>"

{
  "id": 123,
  "benchmarkId": "Windows_Server_2022",
  "slug": "windows-server-2022",
  "status": "accepted",
  "statusDate": "2024-09-13",
  "title": "Windows Server 2022 Security Technical Implementation Guide",
  "description": "Microsoft Windows Server 2022 security benchmark.",
  "version": "1",
  "createdAt": "2026-03-16T00:00:00.000Z",
  "updatedAt": "2026-03-16T00:00:00.000Z",
  "groups": [
    {
      "id": 456,
      "benchmarkId": 123,
      "groupId": "V-254123",
      "title": "Group title",
      "description": "Group description",
      "ruleId": "SV-254123r123456_rule",
      "ruleWeight": "10.0",
      "ruleSeverity": "high",
      "ruleVersion": "SRG-OS-000001-GPOS-00001",
      "ruleTitle": "Windows Server 2022 must enforce an example control.",
      "ruleVulnDiscussion": "Discussion text.",
      "ruleFalsePositives": "False positives text.",
      "ruleFalseNegatives": "False negatives text.",
      "ruleDocumentable": "documentable",
      "ruleMitigations": "Mitigation text.",
      "ruleIdent": "CCI-000001",
      "ruleFixText": "Fix text.",
      "ruleFixId": "F-000001r1_fix",
      "ruleCheckSystem": "http://example.com/check-system",
      "ruleCheckContent": "Check content.",
      "createdAt": "2026-03-16T00:00:00.000Z",
      "updatedAt": "2026-03-16T00:00:00.000Z"
    }
  ],
  "profiles": [
    {
      "id": 10,
      "benchmarkId": 123,
      "profileId": "MAC-1_Classified",
      "title": "MAC-1 Classified",
      "description": "Example profile.",
      "createdAt": "2026-03-16T00:00:00.000Z",
      "updatedAt": "2026-03-16T00:00:00.000Z"
    }
  ]
}

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Path parameters

slugstringRequired

Unique STIG benchmark slug

Query parameters

formatenumOptionalDefaults to json

Export format. Defaults to json.

Allowed values:

Response headers

Content-Dispositionstring

Suggested filename for the exported artifact

Response

STIG export in the requested format

idinteger

benchmarkIdstring

slugstring

statusenum

Allowed values:

statusDatedate

titlestring

descriptionstring

versionstring

createdAtdatetime

updatedAtdatetime

groupslist of objects

profileslist of objects

Errors

400

Bad Request Error

401

Unauthorized Error

404

Not Found Error

500

Internal Server Error