STIG automation with Aaron Lippold

I chat with Aaron Lippold, creator of MITRE's Security Automation Framework (SAF), to discuss how to escape the pain of manual STIG compliance. We explore the technical details of open-source tools like InSpec, Heimdall, and Vulcan that automate validation, normalize diverse security data, and streamline the entire security authoring process. The show notes and blog post for this episode can be found at https://opensourcesecurity.io/2025/2025-06-stig-automation-aaron-lippold/

Episode metadata supplied by the publisher feed · Published Jun 9, 2025

Embed this episode

Attribution link and audio player

Ready to play

STIG automation with Aaron Lippold

0:00 33:28

1×

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

Share this episode

Similar Episodes

No similar episodes found.

Similar Podcasts

The Red Room Redacted Information Security The show where red team stories from around the world are explored by the guys at Redacted Information Security, and new techniques and tools are pulled apart and discussed. Explicit

Frequently Asked Questions

How long is this episode of Open Source Security?

This episode is 33 minutes long.

When was this Open Source Security episode published?

This episode was published on June 9, 2025.

Can I download this Open Source Security episode?

Yes. Use the download control on the episode player to save the publisher-provided media file.

URL copied to clipboard!