ssh-audit
Audits SSH server and client configurations for security, including key exchange, encryption, and compatibility.
What’s new
Verified 3h agoThe highlights of this release are:
* Warnings will be issued on key exchanges that are not post-quantum safe.
* Hardening guides are now included for all supported platforms (see `--list-hardening-guides`).
* UNIX sockets can be used as scan targets (specified with `unix:///path/to/socket`); useful in containerized environments such as CI/CD pipelines.
* Scanning through SOCKS5 proxies can now be done (with `--socks5`).
* A variety of new post-quantum algorithms can now be identified.
BIG THANKS to [realmiwi](https://github.com/realmiwi) for being the project's *very first sponsor!!*
The full release notes are:
- Added support for Python 3.14.
- Dropped support for Python 3.8, as it reached end-of-life in October 2024.
- Dropped support for Python 3.9, as it reached end-of-life in October 2025.
- Added warning to all key exchanges that do not include protections against quantum attacks due to the Harvest Now, Decrypt Later strategy (see https://en.wikipedia.org/wiki/Harvest_now,_decrypt_later).
- Removed SSHv1 support (rationale is documented in: https://github.com/jtesta/ssh-audit/issues/298).
- Added hardening guides (see `--list-hardening-guides` and `--g
Full release notes →
* Warnings will be issued on key exchanges that are not post-quantum safe.
* Hardening guides are now included for all supported platforms (see `--list-hardening-guides`).
* UNIX sockets can be used as scan targets (specified with `unix:///path/to/socket`); useful in containerized environments such as CI/CD pipelines.
* Scanning through SOCKS5 proxies can now be done (with `--socks5`).
* A variety of new post-quantum algorithms can now be identified.
BIG THANKS to [realmiwi](https://github.com/realmiwi) for being the project's *very first sponsor!!*
The full release notes are:
- Added support for Python 3.14.
- Dropped support for Python 3.8, as it reached end-of-life in October 2024.
- Dropped support for Python 3.9, as it reached end-of-life in October 2025.
- Added warning to all key exchanges that do not include protections against quantum attacks due to the Harvest Now, Decrypt Later strategy (see https://en.wikipedia.org/wiki/Harvest_now,_decrypt_later).
- Removed SSHv1 support (rationale is documented in: https://github.com/jtesta/ssh-audit/issues/298).
- Added hardening guides (see `--list-hardening-guides` and `--g
Official download sources
Each source below has been validated against an approved publisher domain and editorially approved. Links route through a safe internal redirect.
Verified checksum File integrity
3/45 engines flagged this file VirusTotal ↗Verify your downloaded file matches the publisher’s official hash before installing.
SHA-256
8fbacc731e8e3dc850204e8eefa909baed219bc3f90b83905c8421ca3ad25177
Platforms: Windows
ssh-audit compared
A factual, side-by-side overview based only on verified data.
Alternatives to ssh-audit
Verified, official downloads in the same category.
Frequently asked questions
Where can I download ssh-audit safely?
Use the official sources listed on this page. Each link is validated against an approved publisher domain and routes through a safe internal redirect — no third-party or bundled installers.
Which platforms does ssh-audit support?
ssh-audit is available for Windows.
Is this the official ssh-audit download?
Yes. Every source shown here is validated against the publisher’s approved domain and editorially reviewed before being published.
Who develops ssh-audit?
ssh-audit is developed by Joe Testa.
What are the best alternatives to ssh-audit?
Popular alternatives include Tunnl, gopass and Hiddify. See the comparison above for a side-by-side overview.
Reviews & ratings
No reviews yet — be the first to share your experience.
Write a review