Describe your app. Draugr figures out the rest.
Developer-first, descriptor-driven security scanning orchestration — declare your app's surface and Draugr runs the right scanners and produces audit-ready, pass/fail evidence.
draugr.dev · Blog · Contact
Intentionally-vulnerable sample app for testing security scanners end to end — SAST, SCA, secrets, IaC and container findings, all reproducible. Built to exercise Draugr, useful for evaluating any …
HTML
Run Trivy, Semgrep, Gitleaks and more from one file. Consolidates SAST, SCA, secrets, IaC and container findings into one SARIF report and one pass/fail gate for CI — ranked by real risk, and can fail a PR on new findings only.
Intentionally-vulnerable sample app for testing security scanners end to end — SAST, SCA, secrets, IaC and container findings, all reproducible. Built to exercise Draugr, useful for evaluating any scanner.
Loading…
Loading…
