InfraGuard

Security check: SSH weak algorithms

Use of legacy protocol / weak KEX, ciphers or MACs.

WarningSSH config

What it checks

Use of legacy protocol / weak KEX, ciphers or MACs.

Why it matters

Weak crypto risks MITM and decryption.

How to fix

Allow only strong Ciphers/KexAlgorithms/MACs.

InfraGuard runs all 36 checks across your servers at once and grades each host A–F.

Track these versions on your own servers

InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.

Weekly exploited-vulnerability digest

The KEV additions that matter for self-hosted servers, once a week. No other mail.