Security toolchain
Network, web, API, credential, binary, forensics, cloud, container, IaC, and wireless tools in one Kali-based image.
Drost-v1 · Open source
Give your AI agent a real security toolchain.
The original Drost foundation is now openly released as the Drost Community Edition. One multi-platform container with an MCP server, 128 offensive security tools.
QUICK START
macOS and Linux
curl -fsSL https://drost.ai/community/install.sh | bashRequires Docker Engine or Docker Desktop.
TOOLS
128 MCP tools in full mode
PLATFORMS
Linux AMD64 and ARM64
LICENSE
Apache License 2.0
Drost evolution
This is where Drost started. Today, Drost is in its fourth generation.
Community Edition opens the original Drost-v1 foundation: the tool layer that started the journey. Drost has since evolved through Edge and Platform into Drost Elite, our fourth-generation operating model.
That makes this the right time to open our early work. It remains a useful, working foundation for researchers, engineers, and the security community to run, study, extend, and build on.
- 01Drost-v1
Community Edition
The original container-native MCP security toolkit. Now open source.
- 02Drost-v2
Drost Edge
Customer-controlled autonomous security from the terminal.
- 03Drost-v3
Drost Platform
Hosted autonomous assessment and continuous capability improvement.
- 04Drost-v4
Drost Elite
Coordinated offensive agents with human judgment at consequential gates.
What is inside
One boundary between the model and the tools.
The MCP server and every executable share the same container, so agent tool calls map to predictable processes and a durable engagement workspace.
Native MCP interface
All 128 tools are advertised by default over stdio with schemas designed for direct agent use.
Persistent workspace
Keep engagement inputs, evidence, and outputs in a Docker volume mounted at /workspace.
No listening service
Your agent launches Drost through docker exec. The container publishes no host ports.
Bring your agent
Use the runtime you already trust.
Drost uses local stdio MCP, so it connects to popular coding agents without exposing a network service or locking you to one model provider.
Tess
OpenCode
Pi
Codex
Claude Code
Gemini CLI
Cursor
VS Code
Authorized use only
Capability does not create permission.
Use Drost only against systems you own or are explicitly authorized to test. You are responsible for scope, rules of engagement, evidence handling, and the impact of the underlying security tools.
Start locally