Blog

11 years ago today, frustrated with the state of AppSec, I told my co-founderMatt Tesauro, “If you give me the chance, I could write a tool to fix all of this.” That was the...

DefectDojo is my life’s work. Ten years ago, Matt Tesauro and I set out to fix what we saw as fundamentally broken in AppSec & security at large – a lack of scalability driven by...

Risk prediction, data importing, and reporting enhancements to support enterprise security efficiency and visibility Austin, TX, April 12, 2024–DefectDojo, the company that...

First, if you’re not familiar with ASPM, ASPM is short for “Application Security Posture Management” - 🤦🏻, and everyone is talking about it because Gartner has stated that ASPM...

Wrangling different security tools and report formats was my least favorite part about working in AppSec. Prior to DefectDojo, I spent more than 60% of my time on tasks that...

Automating Dynamic Security Testing If you’re reading this, chances are you’re already a believer in DevSecOps and you’re currently going through some pain related to automating...