OWASP DefectDojo

on YouTube ↗27m

" summary

DefectDojo is an open source AppSec platform that aggregates 180+ scanner parsers and exposes a REST‑based API, normalizing and de‑duping findings, grouping scanners into engagements, and pushing cleaned issues to Jira or other trackers. Deploy with Docker Compose, a community Helm chart, an AWS AMI, or use DefectDojo Pro SaaS. Project cadence is weekly bug fixes and monthly releases; recent deprecations (MySQL, RabbitMQ) and a UI rewrite aim to improve stability. Real result: assessments jump from 44 to 414 assessments (9.4×) while shaving ~5.5 FTE worth of effort.

AI-written summary · about

" chapters (11)

1. 0:00Introduction
2. 1:27What is DefectDojo
3. 3:36Key features
4. 5:46Project status
5. 7:53DefectDojo in DevSecOps
6. 11:00Real-world impact
7. 13:06Improving scanner accuracy
8. 14:34Deprecations and future plans
9. 16:40UI refresh and roadmap
10. 21:00Q&A
11. 27:04Closing

" related talks

• 30mDefectDojo ProjectTimo Pagel, Stefan Fleckenstein · OWASP 2022 Global AppSec Europe Virtual Event
• 31mDefectDojoMatt Tesauro · Global AppSec Lisbon 2024
• 29mFlagship Projects: DefectDojoMatt Tesauro, Aaron Weaver · OWASP 20th Anniversary 2021
• 40mMaking Vulnerability Management Less Painful with OWASP DefectDojoGreg Anderson · AppSec USA 2017
• 59mBecoming A Master In The Dojang With DefectDojoCody Maffucci · OWASP 2022 Global AppSec Europe Virtual Event
• 43mBuilding a Secure DevOps PipelineAaron Weaver · AppSec USA 2017
• 30mSecuring DevOps using OWASP DevSecOps ToolsAhmed Abdullah · DevOpsDays Cairo 2025
• 47mSecurity Gate: Building a Homegrown SAST Orchestration PlatformIgor Ignatev · HighLoad++ 2024