prototype SSH configuration and policy scanner


A SSH configuration and policy scanner

Key Benefits

  • Minimal Dependancies – Uses native Ruby and BinData to do its work, no heavy dependancies.
  • Not Just a Script – Implementation is portable for use in another project or for automation of tasks.
  • Simple – Just point ssh_scan at an SSH service and get a JSON report of what it supports and its policy status.
  • Configurable – Make your own custom policies that fit your unique policy requirements.


To install and run as a gem, type:
gem install ssh_scan
To run from a docker container, type:
docker pull mozilla/ssh_scan
docker run -it mozilla/ssh_scan /app/bin/ssh_scan -t
To install and run from source, type:
# clone repo
git clone
cd ssh_scan
gpg2 --keyserver hkp:// --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3
curl -sSL | bash -s stable
rvm install 2.3.1
rvm use 2.3.1
gem install bundler
bundle install


Source: Github


Categories: Tools