DefectDojo
summary
DefectDojo takes noisy outputs from scanners and normalizes, deduplicates and tracks them via a REST API and a SaaS offering, ingesting results from 179 tool integrations, pushing bi‑directional issues to Jira, and remembering false positives so they never reappear. It scales from small installs to instances tracking 9,000 products with 26,000 daily scans or millions of findings, ships monthly releases (bugfixes weekly) and recently passed 10,000+ GitHub PRs while increasing automated assessment throughput (44 → 224 yearly).
AI-written summary · about
chapters (10)
- 0:00DefectDojo introduction
- 2:54Need for single source of truth
- 6:26What is DefectDojo
- 8:54Project growth and community
- 12:25DefectDojo and DevSecOps
- 15:59Real-world impact and efficiency
- 19:09Filtering security findings
- 21:57Future plans and changes
- 23:42Resources and updates
- 24:48Q&A and scaling
related talks
30mDefectDojo Project
27mOWASP DefectDojo
29mFlagship Projects: DefectDojo
40mMaking Vulnerability Management Less Painful with OWASP DefectDojo
59mBecoming A Master In The Dojang With DefectDojo
47mSecurity Gate: Building a Homegrown SAST Orchestration Platform
43mBuilding a Secure DevOps Pipeline
30mSecuring DevOps using OWASP DevSecOps Tools