SSHGuard Intrusion Prevention System

A modular Open-Source Intrusion Prevention System built for high-efficiency and ease of use. SSHGuard is free, open-source, and deployed on tens of thousands of servers worldwide, including Google.

---

Use case

SSHGuard monitors a system's activity by analysing its log files in real-time, detects an attack while it happens, and blocks the perpetrator using a variety of supported methods. Users can request support for protection of new services, or blocking through new systems (firewalls, monitoring systems etc) on the project's website. The modular architecture of the software makes such extensions efficient to introduce and to maintain.

Organizations use this software to:

• Protect servers from online attacks

Engineering features

• Modular design to support a large set of Operating Systems, Services, and Firewalls.
• Secure detection of attacks through LALR parser; only software not vulnerable to log analysis vulnerabilities in 10 years.
• Easy-to-deploy package with largely automated detection and configuration, customizable attack detection thresholds.