PyForge is sold only here, on the official py-forge.com website — beware of imitations.

Back to the catalog

SSH KeyAudit fleet key inventory

#python#security#secrets#cli

Managing SSH access across expanding server infrastructure often leads to untracked authorized_keys files, lingering access from offboarded personnel, and cryptographically obsolete keys…

$49 Commercial License
Or get every tool, current and future, for $99 with the All-Access Pass

After payment, Stripe emails your download link within a few minutes (valid 7 days). Pass buyers also get the private All-Access Vault on GitHub.

Digital goods, delivered instantly. If a tool doesn't work as described, we fix it or refund you — see Terms.

Not sure? Try the free MockForge sample first.

requirements.txt — list of dependencies

What's in the ZIP

  • Python source, README and requirements

Why PyForge: Ready-made tools with full source code.

More details

Managing SSH access across expanding server infrastructure often leads to untracked authorized_keys files, lingering access from offboarded personnel, and cryptographically obsolete keys deployed without central administrative oversight. Engineering teams struggle to maintain continuous compliance when public keys are manually added across disparate user home directories. SSH KeyAudit parses raw SSH wire format buffers using only Python standard library utilities to compute standard OpenSSH SHA256 fingerprints and extract algorithm bit lengths. It connects over standard OpenSSH to scan user and root authorized_keys files, matching discovered credentials against an owners registry to pinpoint unassigned or offboarded personnel. The audit engine flags deprecated DSA keys, RSA keys below configurable bit thresholds, lines lacking restrictive options, and duplicate keys scattered across disparate hosts. Example: View all supported CLI arguments by executing python3 ssh_keyaudit_fleet_key_invento.py --help. Audit target infrastructure against security policies with python3 ssh_keyaudit_fleet_key_invento.py --owners owners.txt --min-rsa-bits 3072. This tool does not automatically modify, overwrite, or delete remote authorized_keys files during its inspection process.

SSH KeyAudit fleet key inventorySecurity

Quick Start

Runs on Python 3.9 or newer. Check requirements.txt in the ZIP and install what it lists with pip install -r requirements.txt.

1 — Install the dependencies

pip install -r requirements.txt

2 — Run it

How agents & programs use it: Install its requirements in a virtual environment; scripts and AI agents can then run it as a subprocess.

Why developers buy from PyForge

  • Save hours: ready-made, tested tools. Skip writing, debugging and maintaining it yourself.
  • Ready in minutes: one file, drop it in your project and run it.
  • Zero dependencies: no pip install chains, no supply-chain risk.
  • Full source code: readable, auditable, yours to modify.
  • Runs locally and offline: no account, no API key, no data leaves your machine.
  • Pay once, own it: no subscription.
  • Tested before release: every tool is checked before it goes on sale.

All-Access Pass

Get every PyForge tool with the All-Access Pass

36 tools today plus every future release, lifetime commercial license, one payment of $99.

This tool: $49 · All 36 tools: $99

See the All-Access Pass
$49
Temporarily unavailable