Try “SSH”, “passkeys”, “WordPress” or “Content-Security-Policy”.
SSH Config Builder · runs in your browser
Choose your options and get a hardened OpenSSH server drop-in file, with the commands to test and apply it safely.
OpenSSH uses the first value it reads for most options, so a drop-in file that sorts early (10-) wins over later files such as 50-cloud-init.conf. Modern OpenSSH already picks strong algorithms, so this file leaves them alone.
Read the background
Every hosting model splits security work between you and the provider. We compare shared hosting, unmanaged and managed servers, platforms as a service and static hosting by who patches, isolates and restores.
High impact5 min
Support periods, update processes and default protection differ more than package names. We compare Debian, Ubuntu LTS, Rocky Linux, AlmaLinux and Alpine as systems you leave running for years.
Medium impact5 min
Most attacks on SSH are automated guessing. Keys, a small drop-in file and an allow list make that guessing pointless. Here are the settings and how to apply them without locking yourself out.
High impact6 min
More tools
