DefectDojo is a security program and vulnerability management tool. DefectDojo allows you to manage your application security program, maintain product and application information, schedule scans, triage vulnerabilities and push findings into defect trackers. Consolidate your findings into one source of truth with DefectDojo.
If you'd like to check out a demo of DefectDojo before installing it, you can check out our PythonAnywhere demo site.
You can log in as an administrator like so:
You can also log in as a product owner / non-staff user:
For additional documentation you can visit our Read the Docs site.
Deploy to Docker Cloud. (Login first to Docker Cloud before clicking the install button.)
Detailed guide for setting up DefectDojo on Ubuntu 14.04.
We recommend checking out the about document to learn the terminology of DefectDojo, and the getting started guide for setting up a new installation. We've also created some example workflows that should give you an idea of how to use DefectDojo for your own team.
- DefectDojo Python API:
pip install defectdojo_apior clone the repository.
Engagement Surveys - A plugin that adds answerable surveys to engagements.
DefectDojo is maintained by:
- Greg Anderson (@_GRRegg)
- Charles Neill (@ccneill)
- Jay Paz (@jjpaz)
- Aaron Weaver ([@weavera] (https://twitter.com/weavera))
With past contributions from:
- Fatimah Zohra
- Michael Dong
Proceeds are used for testing, infrastructure, etc.
Interested in becoming and sponsor and having your logo displayed? Please email [email protected]
DefectDojo is licensed under the BSD Simplified license