DefectDojo
DefectDojo is a security program and
vulnerability management tool.
DefectDojo allows you to manage your application security program, maintain
product and application information, schedule scans, triage vulnerabilities and
push findings into defect trackers.
Consolidate your findings into one source of truth with DefectDojo.
Demo
Try out DefectDojo in our
testing environment with the following
credentials.
- admin / defectdojo@demo#appsec
- product_manager / defectdojo@demo#product
Quick Start
git clone https://github.com/DefectDojo/django-DefectDojo
cd django-DefectDojo
# building
docker-compose build
# running
docker-compose up
Navigate to http://localhost:8080.
Documentation
For detailed documentation you can visit
Read the Docs.
Supported Installation Options
Getting Started
We recommend checking out the
about document to
learn the terminology of DefectDojo and the
getting started guide
for setting up a new installation.
We've also created some example
workflows that
should give you an idea of how to use DefectDojo for your own team.
Client APIs
- Install the DefectDojo Python API via
pip install defectdojo_apior clone
the repository. - Browse the API on
SwaggerHub.
Getting Involved
Realtime discussion is done in the OWASP Slack Channel, #defectdojo.
Get Access.
More info: Contributing guideline
DefectDojo Twitter Account tweets project
updates and changes.
Available Plugins
Engagement Surveys
– A plugin that adds answerable surveys to engagements.
About Us
DefectDojo is maintained by:
Project Moderators
Project Moderators can help you with pull requests or feedback on dev ideas.
- Alex Dracea
- Valentijn Scholten
- Jannik Jürgens
- Fred Blaise
- Saurabh kumar
- Cody Maffucci
Hall of Fame
- Charles Neill (@ccneill) – Charles served as a
DefectDojo Maintainer for years and wrote some of Dojo's core functionality. - Jay Paz (@jjpaz) – Jay was a DefectDojo
maintainer for years. He performed Dojo's first UI overhaul, optomized code structure/features, and added numerous enhancements.
Contributing
We greatly appreciate all of our
contributors.
We would also like to highlight the contributions from Michael Dong and Fatimah
Zohra who contributed to DefectDojo before it was open source.
Swag Rewards
If you fix an issue with the swag reward tag, we'll send you a shirt and some
stickers!
Support
Proceeds are used for testing, infrastructure, etc.
Sponsors
Interested in becoming a sponsor and having your logo displayed? Please review
our sponsorship information or email greg.anderson@owasp.org
License
DefectDojo is licensed under the BSD Simplified license