Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.
Describe your app.Draugr figures out the rest. · Find the security problems in your app without being a security engineer. Draugr runs Trivy, Semgrep, Gitleaks and more from one file — SAST, SCA, secrets, IaC and container findings in one report and one pass/fail answer, ranked so you know what to fix first. Open source, runs in your own pipeline. · Not every “critical” is critical. · What it checks, and what does the checking · The answer, in your editor and your assistant. · Make the fast path the secure path.
mcpb:https://github.com/draugr-dev/draugr/releases/download/v0.108.0/draugr-0.108.0.mcpb
| Type | MCP server |
| Section | MCP servers |
| Pricing | free |
| Platform | Command line |
| Systems | cli, api |
| Hosting | local |
| Install | mcp |
| Protocols | mcp |
| Site language | en |
| GitHub | draugr-dev/draugr |
| Launched | 2026-08-28 |