# Install ssh-audit with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper

SSH server & client auditing. Version 3.9.0 via Homebrew; verified 2026-07-07. Also installable with debian: sudo apt install ssh-audit.

## Install

```sh
sudo av install brew:ssh-audit
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install ssh-audit
```

  Evidence: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install ssh-audit
```

  Evidence: MacPorts ports tree: security/ssh-audit/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add ssh-audit
```

  Evidence: Alpine Linux edge package indexes: ssh-audit from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install ssh-audit
```

  Evidence: Debian stable package indexes: ssh-audit from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install ssh-audit
```

  Evidence: Fedora Rawhide package metadata: ssh-audit from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#ssh-audit
```

  Evidence: nixpkgs package indexes: pkgs/by-name/ss/ssh-audit/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S ssh-audit
```

  Evidence: Arch Linux sync databases: ssh-audit from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install ssh-audit
```

  Evidence: openSUSE Tumbleweed package metadata: ssh-audit from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

## Package facts

- **Package key:** brew:ssh-audit
- **Package manager:** Homebrew
- **Version:** 3.9.0
- **Source summary:** SSH server & client auditing
- **Homepage:** <https://github.com/jtesta/ssh-audit>
- **Repository:** <https://github.com/jtesta/ssh-audit>
- **Last updated:** 2026-07-07T08:04:06Z
- **Generated:** 2026-08-03T19:37:03+00:00

## Executables

- ssh-audit (alias)

## Install behavior

- Bottle: not available

## Freshness

- Page generated: 2026-08-03
- Package-manager version: 3.9.0
## Project history and usage

ssh-audit is a dependency-free command-line tool for auditing SSH server and client cryptographic configuration.

### Project history

The maintained jtesta/ssh-audit line was created in 2017 and the README identifies it as the v2.0+ continuation of arthepsy/ssh-audit v1.x after the earlier project became inactive.

Version 2.0.0 was released in 2019. Later releases expanded server and client auditing, policy scans, algorithm lookup, hardening guides, JSON output, multi-target scans, and checks related to SSH cryptographic weaknesses.

### Adoption history

The upstream README advertises prebuilt packages for PyPI, Snap, Docker, and Windows, includes badges for PyPI, Homebrew, Docker, and Snap downloads, and links to Repology for broader package status. The input facts list packages in Alpine, Homebrew, Debian/Ubuntu, Fedora/DNF, MacPorts, Nix, Arch, and openSUSE.

### How it is used

Admins and security engineers use ssh-audit against hostnames, addresses, Unix sockets, target lists, or in client-audit mode. It reports banners, key exchange, host-key, encryption, MAC, compression, algorithm history, security warnings, and recommendations.

### Why package nerds care

ssh-audit is package-nerd friendly because it is a single Python CLI with no runtime dependencies, making it easy to package and run in CI, containers, security baselines, and one-off terminal checks across operating systems.

### Timeline

- 2017-09: jtesta/ssh-audit repository created.
- 2019-08: v2.0.0 released as the maintained v2 line.
- 2020: v2.3.0 released with continued feature development.
- 2024-2026: README documents current Python-version support, hardening guides, package surfaces, and v3.x development.

### Related projects

- Related projects and surfaces include arthepsy/ssh-audit, OpenSSH, Dropbear SSH, libssh, PyPI, Docker Hub, Snap, Homebrew, and ssh-audit.com.

### Sources

- <https://api.github.com/repos/jtesta/ssh-audit>
- <https://github.com/jtesta/ssh-audit>
- <https://github.com/jtesta/ssh-audit/releases>
- input.source_facts.package-manager


## Security Notes

broad file, network, media, or database tool signal.

- **Geiger risk:** blue / medium
- broad file, network, media, or database tool signal

## Other Package-Manager Records

- Debian apt - ssh-audit - 3.3.0-2: normalized package name match | Debian stable package indexes: ssh-audit from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | tool for ssh server & client auditing | https://github.com/jtesta/ssh-audit
- Nix - ssh-audit: normalized package name match | nixpkgs package indexes: pkgs/by-name/ss/ssh-audit/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - ssh-audit - 3.1.0-1: normalized package name match | Ubuntu 24.04 LTS package indexes: ssh-audit from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | tool for ssh server auditing | https://github.com/jtesta/ssh-audit
- apk - ssh-audit - 3.9.0-r0: normalized package name match | Alpine Linux edge package indexes: ssh-audit from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | SSH server and client configuration auditing | https://github.com/jtesta/ssh-audit
- apk - ssh-audit-doc - 3.9.0-r0: normalized package name match | Alpine Linux edge package indexes: ssh-audit-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | SSH server and client configuration auditing (documentation) | https://github.com/jtesta/ssh-audit
- apk - ssh-audit-pyc - 3.9.0-r0: normalized package name match | Alpine Linux edge package indexes: ssh-audit-pyc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Precompiled Python bytecode for ssh-audit | https://github.com/jtesta/ssh-audit
- dnf - ssh-audit - 3.3.0-9.fc45: normalized package name match | Fedora Rawhide package metadata: ssh-audit from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | An SSH server & client configuration security auditing tool | https://github.com/jtesta/ssh-audit
- pacman - ssh-audit - 3.9.0-1: normalized package name match | Arch Linux sync databases: ssh-audit from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | SSH configuration auditing | https://github.com/jtesta/ssh-audit
- zypper - ssh-audit - 3.9.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: ssh-audit from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | SSH server auditing | https://github.com/jtesta/ssh-audit
- MacPorts - ssh-audit: normalized package name match | MacPorts ports tree: security/ssh-audit/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/ssh-audit.yml](https://github.com/mxcl/pkgdb/blob/main/combined/ssh-audit.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph