diff --git a/checker/collect.go b/checker/collect.go
index d4e0f3f..d7d3d08 100644
--- a/checker/collect.go
+++ b/checker/collect.go
@@ -57,9 +57,8 @@ func (p *sshProvider) Collect(ctx context.Context, opts sdk.CheckerOptions) (any
 	includeAuthProbe := sdk.GetBoolOption(opts, OptionIncludeAuthProbe, true)
 
 	ports := parsePorts(optString(opts, OptionPorts, ""))
-	// Port 22 is always probed.
-	if !containsUint16(ports, DefaultSSHPort) {
-		ports = append([]uint16{DefaultSSHPort}, ports...)
+	if len(ports) == 0 {
+		ports = []uint16{DefaultSSHPort}
 	}
 
 	// Origin is the FQDN where the service is mounted: svc.Domain holds the
diff --git a/checker/definition.go b/checker/definition.go
index 7d26191..d6025d3 100644
--- a/checker/definition.go
+++ b/checker/definition.go
@@ -48,9 +48,9 @@ func (p *sshProvider) Definition() *sdk.CheckerDefinition {
 				{
 					Id:          OptionPorts,
 					Type:        "string",
-					Label:       "Additional ports",
+					Label:       "Ports",
 					Placeholder: "22, 2222",
-					Description: "Comma-separated list of additional TCP ports to probe. Port 22 is always probed.",
+					Description: "Comma-separated list of TCP ports to probe. Defaults to port 22 when empty.",
 					Default:     "",
 				},
 				{
diff --git a/checker/interactive.go b/checker/interactive.go
index 6ac08d6..9378ef6 100644
--- a/checker/interactive.go
+++ b/checker/interactive.go
@@ -55,9 +55,9 @@ func (p *sshProvider) RenderForm() []sdk.CheckerOptionField {
 		{
 			Id:          OptionPorts,
 			Type:        "string",
-			Label:       "Additional ports",
+			Label:       "Ports",
 			Placeholder: "22, 2222",
-			Description: "Comma-separated list of additional TCP ports to probe. Port 22 is always probed.",
+			Description: "Comma-separated list of TCP ports to probe. Defaults to port 22 when empty.",
 		},
 		{
 			Id:      OptionProbeTimeoutMs,