Flagship Projects: DefectDojo
summary
OWASP DefectDojo claims to consolidate and dedupe findings from many scanners and it actually ingests 100+ tool parsers into a Django/Python backend with a growing React UI and REST API v2. Deployments run via Docker Compose or Kubernetes Helm3; real pipelines report 5,100 runs and 225,000 container executions over months, and a public demo and a 21 GB database handling 5,000 findings/day show the system scales and automation-first workflows work.
AI-written summary · about
chapters (29)
- 0:00Intro
- 0:28Who am I
- 1:56Breaking two boards
- 2:50Excel
- 3:06Google Sheets
- 3:55About DefectDojo
- 5:11What DefectDojo does well
- 6:56When did DefectDojo start
- 7:48Features of DefectDojo
- 9:07Tools
- 12:02Automation
- 12:30Automation with tooling
- 13:23APSec Pipeline
- 14:35Kafka Pipeline
- 17:25Event Driven Stats
- 17:59Large Education Company
- 18:32Deployment Options
- 18:44Docker
- 19:51Kubernetes
- 21:09Massive Installation
- 21:38Godojo
- 22:12Upcoming Improvements
- 24:22Authorization Model
- 25:11Community
- 25:38Commit Rates
- 25:55Growth
- 26:32Help
- 27:16Community Contributions
- 27:39Demo
related talks
27mOWASP DefectDojo
30mDefectDojo Project
31mDefectDojo
40mMaking Vulnerability Management Less Painful with OWASP DefectDojo
59mBecoming A Master In The Dojang With DefectDojo
43mBuilding a Secure DevOps Pipeline
47mSecurity Gate: Building a Homegrown SAST Orchestration Platform
30mSecuring DevOps using OWASP DevSecOps Tools