git:20260518.471df3d to git:20260519.a56c976

---

name: "Audit SSH servers and clients for weak algorithms and risky config drift with ssh-audit"

slug: "audit-ssh-servers-and-clients-for-weak-algorithms-and-risky-config-drift-with-ssh-audit"

description: "Inspect an SSH endpoint or config for outdated ciphers, key exchange choices, and hardening gaps before exposure or upgrades."

github_stars: 4164

source: "https://github.com/jtesta/ssh-audit"

author: "jtesta"

publisher_type: "individual"

category: "Security & Verification"

framework: "Multi-Framework"

tool_ecosystem:

github_repo: "jtesta/ssh-audit"

github_stars: 4164

---

# Audit SSH servers and clients for weak algorithms and risky config drift with ssh-audit

Inspect an SSH endpoint or config for outdated ciphers, key exchange choices, and hardening gaps before exposure or upgrades.

## Prerequisites

Python 3 or packaged binary, network access to SSH targets

## Installation

Use the upstream install or setup path that matches your environment:

- $ docker pull positronsecurity/ssh-audit

Requirements and caveats from upstream:

- [](https://hub.docker.com/r/positronsecurity/ssh-audit)

- supports Python 3.9 - 3.13;

- -m, --manual print the man page (Docker, PyPI, Snap, and Windows

Basic usage or getting-started notes:

- [Usage](#usage)

- [Server Standard Audit Example](#server-standard-audit-example)

- [Server Policy Audit Example](#server-policy-audit-example)

- Source: https://github.com/jtesta/ssh-audit

- Extracted from upstream docs: https://raw.githubusercontent.com/jtesta/ssh-audit/HEAD/README.md

## Documentation

- https://github.com/jtesta/ssh-audit

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/audit-ssh-servers-and-clients-for-weak-algorithms-and-risky-config-drift-with-ssh-audit/)