SudoSecurity

sshd_config checker

Paste your sshd_config and get a Hardline-style hardening report. Runs in your browser.

Runs entirely in your browser; nothing is uploaded. Tip: sudo sshd -T prints the effective settings, which is the most accurate input.

How it works

Each check matches a Hardline control (with CIS or DISA STIG references). Like sshd, it uses the first value set for each option and treats Match blocks as overrides.

Hardline applies these fixes for you with a dry-run first, and it reverts automatically if you can't log back in: hardline audit then hardline apply --commit.