CPE Home Common Platform Enumeration: A structured naming scheme for IT systems, platforms, and packages
CPE Website is in "Archive" status — read the announcement


CPE in Use — Archive

CPE is a standardized way for enterprises to describe and identify classes of applications, operating systems, and hardware. CPE also helps in Making Security Measurable.


CPE Dictionary

Provided in XML format and available to the general public, the current official version of the CPE Dictionary is maintained by the U.S. National Institute of Standards and Technology (NIST) and provides an agreed-upon list of official CPE names.

Security Content Automation Protocol (SCAP)

CPE is one of ten existing standards the National Institute of Standards and Technology’s (NIST) SCAP to enable automated vulnerability management, measurement, and policy compliance evaluation.



Tools Including CPE (SCAP-Validated)



Page Last Updated: March 22, 2013