Audit SSH servers and clients for weak algorithms and risky config drift with ssh-audit

Inspect an SSH endpoint or config for outdated ciphers, key exchange choices, and hardening gaps before exposure or upgrades.

Prerequisites

Python 3 or packaged binary, network access to SSH targets

Installation

Use the upstream install or setup path that matches your environment:

• $ docker pull positronsecurity/ssh-audit

Requirements and caveats from upstream:

• 
• supports Python 3.9 - 3.13;
• -m, --manual print the man page (Docker, PyPI, Snap, and Windows

Basic usage or getting-started notes:

• Usage

• Server Standard Audit Example

• Server Policy Audit Example

• Source: https://github.com/jtesta/ssh-audit

• Extracted from upstream docs: https://raw.githubusercontent.com/jtesta/ssh-audit/HEAD/README.md

Documentation

• https://github.com/jtesta/ssh-audit

Source

• Agent Skill Exchange