ssh-audit is a command-line tool for auditing the security configuration of SSH servers and clients.
The tool addresses the challenge of assessing SSH security posture by connecting to SSH endpoints and analyzing their cryptographic parameters, protocol support, and configuration choices. It examines banners, key exchange algorithms, encryption ciphers, message authentication codes, compression settings, and compatibility profiles. The audit results highlight security weaknesses and compatibility concerns, allowing administrators to understand which algorithms and configurations their SSH implementations expose.
Organizations running SSH infrastructure should use this tool to identify misconfigurations and outdated cryptographic choices that could expose systems to attack. It suits environments where SSH hardening is a compliance or security requirement, particularly where administrators need to audit multiple servers or track configuration drift over time. The tool works for both server-side audits (testing what an SSH server offers) and client-side audits (testing what an SSH client accepts), making it useful for comprehensive SSH security assessments across an infrastructure.
The project shows consistent maintenance with regular updates addressing security findings and expanding algorithm coverage. Development activity demonstrates responsiveness to reported issues and a focus on keeping the tool aligned with evolving SSH security standards. The codebase receives ongoing refinement to improve detection accuracy and expand the scope of auditable parameters.
