Making Vulnerability Management Less Painful with OWASP DefectDojo
summary
DefectDojo centralizes scanner output (Nessus, ZAP, Qualys, OpenVAS) and ticket systems (JIRA) to automate consolidation, reporting and metrics; it moves teams from manual Excel/dradis work to parser-driven imports that are ~60 lines to add, 414 assessments in 2016 after adoption, and an overall ~840% throughput increase while the security headcount shrinks to one. The platform is built in Python/Django, offers bi‑directional JIRA integration, a REST API (TastyPie) and features like deduplication, false‑positive history, report templates and a reported ability to handle 500k+ findings with low latency.
AI-written summary · about
chapters (9)
- 0:00Start
- 0:17Senior Security Engineer Pearson
- 1:02So Why Dojo?
- 1:57Getting the Most Out of Your Program
- 14:16Thinking in Dojo By Example
- 15:55Adding New Scanners is EASY
- 18:27Demo Time!
- 32:27The Future
- 33:011.2 Is Live!
related talks
27mOWASP DefectDojo
30mDefectDojo Project
29mFlagship Projects: DefectDojo
31mDefectDojo
59mBecoming A Master In The Dojang With DefectDojo
50mBuilding Your Application Security Data Hub: The Imperative for Structured Vulnerability Information
30mSecuring DevOps using OWASP DevSecOps Tools
47mSecurity Gate: Building a Homegrown SAST Orchestration Platform