# HASSH

HASSH is a Threat Hunting product. It runs in the cloud or on-premises (hybrid). Pricing is free.

A Profiling Method for SSH Clients and Servers.

Checked October 2026.

## What is HASSH?

HASSH is a network fingerprinting standard used to identify specific Client and Server SSH implementations, allowing for easy storage, search, and sharing of MD5 fingerprints. Invented at Salesforce in 2018, now actively maintained by Ben Reardon at Corelight. HASSH can help in detecting and investigating brute force or Cred Stuffing password attempts with higher granularity than IP Source, even in NATed or botnet-like scenarios, and in detecting covert exfiltration of data within SSH Client algorithm sets.

Tags: SSH, Brute Force

## Where it fits in your security program (NIST CSF 2.0)

- [Detect](https://cybersectools.com/guides/building-detect-program-small-team): helps you spot attacks and unusual activity.

## Quick facts

- Category: [Security Operations](https://cybersectools.com/categories/security-operations) · [Threat Hunting](https://cybersectools.com/categories/threat-hunting)
- Deployment: Hybrid
- Company size fit: SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 546
- Website: github.com

## Where it ranks

No shortlist covers this product's category yet. The closest is [Best MDR Solutions for Business](https://cybersectools.com/shortlists/best-mdr-solutions).

## HASSH FAQ

### What is HASSH?

HASSH is a product in the Threat Hunting category. It covers SSH and Brute Force.

### What is the pricing for HASSH?

HASSH is free. Download and setup instructions are at https://github.com/salesforce/hassh/.

### What are alternatives to HASSH?

Alternatives to HASSH listed on CybersecTools:

1. [Managed Agentic Threat Hunting](https://cybersectools.com/tools/managed-agentic-threat-hunting) - Managed Agentic Threat Hunting Service (IOC sweeps and hypothesis based hunting) (Commercial)
2. [Akamai Hunt](https://cybersectools.com/tools/akamai-hunt) - Managed threat hunting service detecting evasive threats in network environments (Commercial)
3. [Elastic Search AI Platform](https://cybersectools.com/tools/elastic-search-ai-platform) - Search AI platform with vector database for logs, threat hunting, and AI apps (Commercial)
4. [Cybereason Threat Hunting](https://cybersectools.com/tools/cybereason-threat-hunting) - Proactive threat hunting platform for detecting and investigating attacks (Commercial)
5. [Censys Threat Hunting](https://cybersectools.com/tools/censys-threat-hunting) - Proactive threat hunting platform for detecting adversary infrastructure (Commercial)

Compare all HASSH alternatives at [https://cybersectools.com/alternatives/hassh](https://cybersectools.com/alternatives/hassh)

### What deployment and organization size does HASSH fit?

HASSH is available as cloud or on-premises (hybrid). It is listed for small businesses, mid-market companies and enterprises. It is free.

## Compare HASSH with similar solutions

- [HASSH vs Managed Agentic Threat Hunting](https://cybersectools.com/compare/hassh-vs-managed-agentic-threat-hunting)
- [HASSH vs Akamai Hunt](https://cybersectools.com/compare/akamai-hunt-vs-hassh)
- [HASSH vs Elastic Search AI Platform](https://cybersectools.com/compare/elastic-search-ai-platform-vs-hassh)

All alternatives to HASSH: [/alternatives/hassh](https://cybersectools.com/alternatives/hassh)

---

Source: https://cybersectools.com/tools/hassh

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on HASSH: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md