Shellwarrant
Parse OpenSSH client and server configuration offline, reveal effective hardening gaps, forwarding exposure, auth methods, and host exceptions.
Focused field tools
Apply authentication checks to the recorded evidence, document assumptions, and retain a concrete verification result before changing a live system.
Apply root login checks to the recorded evidence, document assumptions, and retain a concrete verification result before changing a live system.
Apply forwarding checks to the recorded evidence, document assumptions, and retain a concrete verification result before changing a live system.
Apply algorithms checks to the recorded evidence, document assumptions, and retain a concrete verification result before changing a live system.
Apply host keys checks to the recorded evidence, document assumptions, and retain a concrete verification result before changing a live system.
Apply match blocks checks to the recorded evidence, document assumptions, and retain a concrete verification result before changing a live system.
Shellwarrant analyzes recorded configuration text and common directives. Include order, Match blocks, includes, command-line overrides, platform defaults, and version behavior can change effective configuration. Verify on the target host.