What it checks
sshd PermitRootLogin setting.
Why it matters
Direct root access is a brute-force target and weakens audit trails.
How to fix
Set PermitRootLogin no (or prohibit-password) and reload sshd.
InfraGuard runs all 36 checks across your servers at once and grades each host A–F.
Track these versions on your own servers
InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.