/django-DefectDojo

DefectDojo is an open-source defect tracking application

Primary LanguagePythonBSD 3-Clause "New" or "Revised" LicenseBSD-3-Clause

Description

Screenshot of DefectDojo

DefectDojo is a security program and vulnerability management tool. DefectDojo allows you to manage your application security program, maintain product and application information, schedule scans, triage vulnerabilities and push findings into defect trackers. Consolidate your findings into one source of truth with DefectDojo.

Build Status

Quick Start

$ git clone https://github.com/OWASP/django-DefectDojo
$ cd django-DefectDojo
$ ./setup.bash
$ python manage.py runserver

navigate to 127.0.0.1:8000

Demo

If you'd like to check out a demo of DefectDojo before installing it, you can check out our PythonAnywhere demo site.

You can log in as an administrator like so:

Admin

You can also log in as a product owner / non-staff user:

Product owner

Additional Documentation

For additional documentation you can visit our Read the Docs site.

One-Click Installations

Deploy to Docker Cloud. (Login first to Docker Cloud before clicking the install button.)

Deploy to Docker Cloud

Installation Options

Docker - There are currently a number of bugs in the Docker image that we're working to address. Please use the regular install script to avoid issues.

Getting Started

We recommend checking out the about document to learn the terminology of DefectDojo, and the getting started guide for setting up a new installation. We've also created some example workflows that should give you an idea of how to use DefectDojo for your own team.

DefectDojo Client API's

  • DefectDojo Python API: pip install defectdojo_api or clone the repository.

Getting Involved

Get Access. Realtime discussion is done in the OWASP Slack Channel, #defectdojo.

DefectDojo Twitter Account tweets project updates and changes.

Available Plugins

Engagement Surveys - A plugin that adds answerable surveys to engagements.

LDAP Integration

SAML Integration

About Us

DefectDojo is maintained by:

Contributing

We greatly appreciate all of our contributors.

We would also like to highlight the contributions from Michael Dong and Fatimah Zohra who contributed to DefectDojo before it was open source.

Swag Rewards

If you fix an issue with the 'swag reward' tag we'll send you a shirt and some stickers!

Support

Proceeds are used for testing, infrastructure, etc.

Stickers

PayPal

Sponsors

Interested in becoming a sponsor and having your logo displayed? Please email greg.anderson@owasp.org

License

DefectDojo is licensed under the BSD Simplified license