DefectDojo is a security program and vulnerability management tool. DefectDojo allows you to manage your application security program, maintain product and application information, schedule scans, triage vulnerabilities and push findings into defect trackers. Consolidate your findings into one source of truth with DefectDojo.
Try out DefectDojo in our testing environment.
- admin / defectdojo@demo#appsec
- product_manager / defectdojo@demo#product
$ git clone https://github.com/DefectDojo/django-DefectDojo
$ cd django-DefectDojo
$ ./setup.bash
$ ./run_dojo.bashnavigate to 127.0.0.1:8000
For detailed documentation you can visit Read the Docs.
We recommend checking out the about document to learn the terminology of DefectDojo and the getting started guide for setting up a new installation. We've also created some example workflows that should give you an idea of how to use DefectDojo for your own team.
-
DefectDojo Python API:
pip install defectdojo_apior clone the repository. -
Browse the API on SwaggerHub.
Realtime discussion is done in the OWASP Slack Channel, #defectdojo. Get Access.
DefectDojo Twitter Account tweets project updates and changes.
Engagement Surveys - A plugin that adds answerable surveys to engagements.
DefectDojo is maintained by:
- Greg Anderson
- Aaron Weaver (@weavera)
- Matt Tesauro (@matt_tesauro)
- Charles Neill (@ccneill)
- Jay Paz (@jjpaz)
We greatly appreciate all of our contributors.
We would also like to highlight the contributions from Michael Dong and Fatimah Zohra who contributed to DefectDojo before it was open source.
If you fix an issue with the swag reward tag, we'll send you a shirt and some stickers!
Proceeds are used for testing, infrastructure, etc.
Interested in becoming a sponsor and having your logo displayed? Please review our sponsorship information or email greg.anderson@owasp.org
DefectDojo is licensed under the BSD Simplified license