# jtesta/ssh-audit

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

Repository: https://github.com/jtesta/ssh-audit
Canonical: https://ross.abutalabs.com/products/ssh-audit
Language: Python
License: MIT
License Family: permissive
Topics: auditing, security, ssh
Last push: 2026-07-09T23:04:09+00:00

## Health v2 (maintenance only)
Score: 82/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 91, release rhythm 59, longevity 100
- inputs: {"age_days": 3270, "days_push": 55, "days_rel": 60, "gap_med": 627, "n_releases_24m": 2}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 4280, forks 225 (observed 2026-08-28T04:08:41.210117+00:00)

## What it is
ssh-audit is a Python CLI tool that audits SSH server and client configurations, analyzing banners, key exchange, encryption, MAC, and compression algorithms for weaknesses. It provides algorithm recommendations, version compatibility analysis, and policy-based scans against hardened configurations.

## Use cases
- audit my ssh server configuration for weak algorithms
- check which ssh key exchange and cipher algorithms my server supports
- verify ssh servers comply with a hardened security policy
- find weak or legacy ssh settings before a security review
- scan multiple ssh hosts for configuration issues
- get hardening recommendations for OpenSSH or Dropbear

## When to choose
- you need a dependency-free Python tool to audit SSH server or client security
- you want policy-based compliance checks against hardened SSH configurations
- you need algorithm-level analysis with recommendations for specific SSH software versions

## When to avoid
- you need a full network vulnerability scanner rather than an SSH-specific audit
- you want continuous monitoring or a GUI dashboard instead of a one-shot CLI scan
- you need to audit protocols other than SSH

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, vulnerability-scanning, cli
- domain: security, developer-tools
- platform: windows, python, cli
- tags: ssh, ssh-audit, hardening, configuration-audit, penetration-testing, command-line, linux, macos, docker

## Member repositories
- jtesta/ssh-audit (main) score 82

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:08:41.210117+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:21:58.444996+00:00, confidence not recorded.
  - readme: https://github.com/jtesta/ssh-audit (fetched 2026-08-28T04:08:41.210117+00:00, sha 46540a0dcbec)
  - registry_pypi: https://pypi.org/pypi/ssh-audit/json (fetched 2026-08-29T09:11:17.774806+00:00, sha 39d9c88bba43)
- Data as of 2026-08-30T08:39:29.467469+00:00.