ssh-audit Integration with DefectDojo
ssh-audit is an open-source security auditing tool that analyzes the configuration of SSH servers and clients by examining banners, key exchange algorithms, encryption methods, MAC algorithms, compression options, and compatibility settings to identify weak, obsolete, or insecure cryptographic primitives and misconfigurations that could compromise SSH security. The tool performs comprehensive security assessments with policy-based audits against hardening guides for common platforms including Ubuntu, Debian, and OpenSSH versions, providing detailed pass/fail results with remediation guidance aligned with security best practices to help system administrators strengthen SSH tunnel security across on-premises, cloud, and hybrid infrastructure environments.
Data Granularity: What Gets Imported
The following fields are captured from ssh-audit results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "ssh-audit",
"engagement": "<engagement-id>",
"file": "results.json"
}