Cybersecurity · free, no signup
SSH Configuration Analyzer
Paste an sshd_config and see the configuration the daemon will actually run. Its centrepiece is a rule almost every other config format inverts: sshd uses the FIRST value it finds for a keyword and silently ignores every later one, so appending a corrected setting to the bottom of the file changes nothing, restarts cleanly, and leaves an administrator believing a setting is applied when it is not. Match blocks are read the same way sshd reads them — everything below one belongs to it until the next, whatever the indentation suggests — so a scoped exception is never reported as a global weakness, nor a global weakness missed because it sits under a Match. Also covers root login, password and host-based authentication, weak key-exchange, cipher and MAC offerings, forwarding, and whether logins are recorded at all.
Authorized, defensive use only. Check assets you own or lawfully public data. This tool is educational and never provides another party's private data.
Paste an sshd_config and see what the daemon will actually do. The trap this catches first: sshd uses the first value it finds for a keyword and silently ignores every later one — the opposite of nearly every other config format — so appending a corrected setting to the bottom of the file changes nothing, restarts cleanly, and leaves you believing it applied.
Everything runs locally on the text you paste. No host is contacted and no key is read, so this reports what the file says — settings it never mentions fall back to your OpenSSH build's defaults, which this tool does not guess at or vouch for. Confirm with sshd -T on the host.
What happens to what you enter
- The analysis runs on Solvex servers. What is recorded afterwards is a SHA-256 hash of your input and a coarse summary of the outcome — never the input itself, and never a result you could be identified from.
- Tools that read public sources (certificate logs, DNS, a public chain) contact those sources from our servers through a fetcher that refuses private and internal addresses.
- An email address is stored only where a tool offers to send you a report and you choose to give one.
Limits: ten runs of this tool per minute from one address, and three signed reports per minute. Past that the tool says so and tells you when to try again.
When a free check is not enough
This tool reads what is public and reports what it can see. The Cloud Configuration Review engagement is the authorized, specialist-led version: signed scope, findings proven by hand, a signed report, and a retest.
Explore Cloud Configuration Review