---
name: "Audit SSH servers and clients for weak algorithms and risky config drift with ssh-audit"
slug: "audit-ssh-servers-and-clients-for-weak-algorithms-and-risky-config-drift-with-ssh-audit"
description: "Inspect an SSH endpoint or config for outdated ciphers, key exchange choices, and hardening gaps before exposure or upgrades."
github_stars: 4164
verification: "listed"
source: "https://github.com/jtesta/ssh-audit"
author: "jtesta"
publisher_type: "individual"
category: "Security & Verification"
framework: "Multi-Framework"
tool_ecosystem:
  github_repo: "jtesta/ssh-audit"
  github_stars: 4164
---

# Audit SSH servers and clients for weak algorithms and risky config drift with ssh-audit

Inspect an SSH endpoint or config for outdated ciphers, key exchange choices, and hardening gaps before exposure or upgrades.

## Prerequisites

Python 3 or packaged binary, network access to SSH targets

## Installation

Use the upstream install or setup path that matches your environment:
- $ docker pull positronsecurity/ssh-audit

Requirements and caveats from upstream:
- [![Docker Pulls](https://img.shields.io/docker/pulls/positronsecurity/ssh-audit)](https://hub.docker.com/r/positronsecurity/ssh-audit)
- supports Python 3.9 - 3.13;
- -m, --manual print the man page (Docker, PyPI, Snap, and Windows

Basic usage or getting-started notes:
- [Usage](#usage)
- [Server Standard Audit Example](#server-standard-audit-example)
- [Server Policy Audit Example](#server-policy-audit-example)

- Source: https://github.com/jtesta/ssh-audit
- Extracted from upstream docs: https://raw.githubusercontent.com/jtesta/ssh-audit/HEAD/README.md

## Documentation

- https://github.com/jtesta/ssh-audit

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/audit-ssh-servers-and-clients-for-weak-algorithms-and-risky-config-drift-with-ssh-audit/)