I build Draugr, an open-source tool (Apache-2.0). Every scanner I turned on produced hundreds of "critical" findings with no way to tell which ones mattered for the service in front of me. Draugr runs the scanners and ranks what they find by who can reach each part of the app, what the business loses if it stops, and whether anyone is exploiting the flaw today.
https://draugr.dev https://github.com/draugr-dev/draugr
[email protected]