ssh-audit

ssh-audit is a comprehensive SSH server and client configuration auditing tool that analyzes key exchange algorithms, host key types, encryption ciphers, MAC algorithms, and other security-relevant parameters. It identifies vulnerabilities, deprecated algorithms, and configuration weaknesses by comparing the target's SSH implementation against known security advisories and best practices. System administrators, compliance auditors, and penetration testers use ssh-audit to verify that SSH deployments meet security baselines and do not expose weak or compromised cryptographic algorithms. The tool provides color-coded output with clear pass/fail indicators for each algorithm and supports auditing both SSH servers and client configurations across all major SSH implementations.