SSH security
How ServerAlyzer keeps the SSH channel trustworthy.
SSH is the only channel ServerAlyzer uses to talk to your servers, the same protocol you already trust for administration. The app is deliberately strict about it.
- Explicit trust: unknown host keys require your approval of the SHA-256 fingerprint.
- Fail-closed: a fingerprint mismatch blocks the connection instead of prompting you to ignore it.
- Closed command set: the app only runs a fixed catalog of read-only commands.
- No sudo: if the SSH user lacks permission for something, ServerAlyzer reports it; it never escalates.
- Untrusted output: whatever the server returns is sanitized and capped before display.
See the Security page for the full model, including how to report vulnerabilities.
