# arthepsy/ssh-audit

SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

Repository: https://github.com/arthepsy/ssh-audit
Canonical: https://ross.abutalabs.com/products/arthepsy-ssh-audit
Language: Python
License: MIT
License Family: permissive
Last push: 2024-06-28T23:48:45+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 3906, "days_push": 796, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2995, forks 264 (observed 2026-08-28T04:07:36.868578+00:00)

## What it is
ssh-audit is a dependency-free Python CLI tool that audits SSH servers by grabbing banners and enumerating key exchange, host key, encryption, MAC, and compression algorithms. It flags weak or legacy algorithms, recommends configuration changes based on the detected software version, and lists related CVEs.

## Use cases
- audit my ssh server for weak algorithms
- check which ciphers and macs my sshd supports
- find cves affecting my openssh version
- harden ssh server configuration recommendations
- test ssh server before a security review
- compare ssh algorithm compatibility across openssh dropbear libssh

## When to choose
- you need a zero-dependency, portable Python tool for SSH server configuration audits
- you want algorithm recommendations and CVE lookups for OpenSSH, Dropbear, or libssh servers
- you need quick command-line checks of SSH1/SSH2 support and weak algorithm detection

## When to avoid
- you need a full network vulnerability scanner rather than an SSH-specific audit
- you want automated remediation or config file editing rather than reporting
- you need continuous monitoring rather than on-demand auditing

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: security, vulnerability-scanning, cli
- domain: security, developer-tools, networking
- platform: cli, python, cross-platform, windows
- tags: ssh, ssh-audit, hardening, cve, penetration-testing, server-audit, command-line, linux, macos

## Member repositories
- arthepsy/ssh-audit (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:36.868578+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:30:45.428312+00:00, confidence not recorded.
  - readme: https://github.com/arthepsy/ssh-audit (fetched 2026-08-28T04:07:36.868578+00:00, sha 52ab0f8d68fe)
- Data as of 2026-08-30T08:39:29.467469+00:00.