DefectDojo

DefectDojo is a security program and vulnerability management tool. DefectDojo allows you to manage your application security program, maintain product and application information, schedule scans, triage vulnerabilities and push findings into defect trackers. Consolidate your findings into one source of truth with DefectDojo.

Demo

Try out DefectDojo in our testing environment with the following credentials.

admin / defectdojo@demo#appsec
product_manager / defectdojo@demo#product

Quick Start

git clone https://github.com/DefectDojo/django-DefectDojo
cd django-DefectDojo
# building
docker-compose build
# running
docker-compose up

Navigate to http://localhost:8080.

Documentation

For detailed documentation you can visit Read the Docs.

Supported Installation Options

Getting Started

We recommend checking out the about document to learn the terminology of DefectDojo and the getting started guide for setting up a new installation. We've also created some example workflows that should give you an idea of how to use DefectDojo for your own team.

Client APIs and wrappers

This section presents different ways to programmatically interact with defectdojo APIs.

See Wrappers

Release and branch model

See Release and branch model

Getting Involved

Realtime discussion is done in the OWASP Slack Channel, #defectdojo. Get Access.

More info: Contributing guideline

DefectDojo Twitter Account tweets project updates and changes.

Available Plugins

Engagement Surveys – A plugin that adds answerable surveys to engagements.

LDAP Integration

SAML Integration

Multi-Factor Auth

About Us

DefectDojo is maintained by:

Project Moderators

Project Moderators can help you with pull requests or feedback on dev ideas.

Alex Dracea
Valentijn Scholten
Jannik Jürgens
Fred Blaise
Saurabh kumar
Cody Maffucci
Pascal Trovatelli / Sopra Steria

Hall of Fame

Charles Neill (@ccneill) – Charles served as a DefectDojo Maintainer for years and wrote some of Dojo's core functionality.
Jay Paz (@jjpaz) – Jay was a DefectDojo maintainer for years. He performed Dojo's first UI overhaul, optimized code structure/features, and added numerous enhancements.