draugr

active

Know which security findings to fix first, across the scanners you already run. SAST, SCA, secrets, IaC and containers, every finding ranked by exposure, criticality, exploitability and, for Go, reachability.

Code-only MCP server: no hosted endpoint, so you install and run it yourself. It is not probed, graded or counted in our reachability statistics.

Get it

Repository: github.com/draugr-dev/draugr
License: Apache-2.0
Last update: 2026-11-15
GitHub stars: ★ 29
Homepage: draugr.dev

appsec cli code-scanning container-security dast devsecops github-action golang iac-security mcp-server sarif sast

Listed in

github · source

Run this server as a hosted endpoint? Submit the endpoint and it moves to the remote directory, where it is probed and graded.