SSH Hardening with ssh-shield: Automating CIS Compliance

Direct root SSH login is a security anti-pattern. Every CIS Benchmark, every NIST guideline, and every breach post-mortem tells you to disable it. Yet I still see it enabled in production environments