A security auditing tool for SSH server and client configurations, analyzing algorithms, vulnerabilities, and policy compliance.
ssh-audit is a command-line tool that audits SSH server and client configurations for security vulnerabilities and misconfigurations. It analyzes encryption algorithms, key exchanges, and compliance with security policies to help harden SSH deployments against attacks.
System administrators, security professionals, and DevOps engineers responsible for securing SSH services in production environments.
It provides a comprehensive, dependency-free audit with built-in hardening guides and policy checks, making it a trusted tool for proactive SSH security assessment.
SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Evaluates key-exchange, host-key, encryption, and MAC algorithms with security ratings, including historical data from OpenSSH, Dropbear, and libssh for thorough assessments.
Supports policy scans with built-in and custom policies to ensure compliance with hardened configurations, as demonstrated in server and client audit examples from the README.
Detects known vulnerabilities like DHEat (CVE-2002-20001) and Terrapin (CVE-2023-48795) through dedicated command-line options, providing targeted security checks.
Runs without external dependencies on Linux and Windows, with pre-built packages available via PyPI, Docker, Snap, and Homebrew for easy deployment.
Only identifies security issues and provides hardening guides, but does not automatically apply fixes, requiring manual configuration changes which can be time-consuming.
Lacks a native graphical interface, which may be a barrier for users accustomed to GUI-based security tools or those without command-line expertise, despite the optional web front-end.
As noted in the Changelog, versions like v3.0.0 introduced breaking changes to JSON output, which can disrupt existing integrations or scripts relying on stable APIs.