Draugr is an open-source project built for devSecOps engineers and software development teams.

Yes — Draugr is open source under the Open Source license and free to use.

What platforms does Draugr run on?

Draugr runs on the command line. It can also be self-hosted.

Is Draugr still active?

Unverified. Draugr has not been re-checked since it entered the index, so there is no finding either way — and only a positive finding would say otherwise.

What projects are similar to Draugr?

Similar projects tracked by PulseGate include ByteGuard, SecApps, and Sploit.

Draugr is developed by draugr-dev.

Is Draugr open source?

Yes — Draugr is open source under the Open Source license.

Back to the index

Draugr

Name: Draugr
Author: draugr-dev

github.comInfrastructure

Draugr runs Trivy, Semgrep, Gitleaks, and other security scanners from one configuration file. It consolidates SAST, software composition, secrets, IaC, and container findings into a ranked SARIF report and can fail CI on new findings.

Open SourceCLISelf-hosted

Visit github.com

Overview

10 features

Draugr is an Application security & vulnerability scanning project. It focuses on combining and prioritizing findings from multiple security scanners into a single CI decision and SARIF report. It is built as an open-source project for devSecOps engineers and software development teams. The project is open source (Open Source). Draugr is available on the command line, and it can be self-hosted.

draugr-dev builds and maintains Draugr. Among its 10 catalogued features are multi-scanner execution, SARIF reports, and risk ranking. It exposes integrations via a public API.

Summary written by a language model from the project’s public pages.

Multi-scanner execution
SARIF reports
Risk ranking
CI pass/fail gates
New-finding detection
SAST scanning
SCA scanning
Secret detection
IaC scanning
Container scanning

Built with & integrations

Connectors

API

Runs on

CLISelf-hosted

Trust & compliance

License

Open Source

Verified signals

HTTPSOpen SourceFree tier

Indexing history

What PulseGate has recorded for this listing

Indexed28 Aug · 02:23 UTC
Draugr verified via MCP Registry (official)
Source: MCP Registry (official) · Open

Frequently asked questions about Draugr

What is Draugr?: Draugr focuses on combining and prioritizing findings from multiple security scanners into a single CI decision and SARIF report. It is catalogued under Application security & vulnerability scanning on PulseGate.
Who is Draugr for?: Draugr is an open-source project built for devSecOps engineers and software development teams.
Is Draugr free?: Yes — Draugr is open source under the Open Source license and free to use.
What platforms does Draugr run on?: Draugr runs on the command line. It can also be self-hosted.
Is Draugr still active?: Unverified. Draugr has not been re-checked since it entered the index, so there is no finding either way — and only a positive finding would say otherwise.
What projects are similar to Draugr?: Similar projects tracked by PulseGate include ByteGuard, SecApps, and Sploit.ByteGuard SecApps Sploit
Who makes Draugr?: Draugr is developed by draugr-dev.
Is Draugr open source?: Yes — Draugr is open source under the Open Source license.

At a glance

Pricing: Open Source
Platforms: API · CLI
Languages: English
License: Open Source
First seen: 28 Aug 2026
Built for: DevSecOps engineers and software development teams
Model: Open source
Solves: Combining and prioritizing findings from multiple security scanners into a single CI decision and SARIF report.

Developer

draugr-dev

Index record

Indexed: 28 Aug 2026
Lifecycle: Alive
First seen: Aug 2026
Last seen: 28 Aug 2026

Identity audit (13)

Slug: draugr-github-com
Lifecycle last checked: 8 Sept 2026
Verification state: Indexed for public listing
Listing state: Listed: yes
Index status: Included in index
Latest evidence snapshot: 28 Aug 2026
Timeline basis: Indexed-at chronology (no inferred launch/funding milestones).
Name from: Written by a language model from the project's public pages.
Category from: Recorded source: taxonomy-pass-b.
Summary from: Written by a language model from public pages.
Languages from: Detected by a language model, checked against the page's own declaration.
Last updated: 28 Aug 2026
Canonical URL: https://github.com/draugr-dev/draugr

Ship this? Send a correction — no account, and you get a link to follow it.

Also in Application security & vulnerability scanning

Same category — not a similarity match