Events Archive

Introduction to Reporting in DefectDojo

MATT TESAURO — Wed, 09 Sep 2026 19:09:54 GMT

You've imported your scan data and triaged your findings. Now you need to prove the following: an engineer needs a list of what to fix, an auditor needs evidence of compliance, and leadership wants to know whether risk is trending down.

AI Use Cases with DefectDojo Pro: Maturing Vulnerability Management Overnight

TRACY WALKER — Thu, 13 Aug 2026 19:47:24 GMT

Maturing a vulnerability management program has always been slow work, usually spanning over months. Pairing AI agents with DefectDojo Pro collapses that timeline to days

Training: Getting Data into DefectDojo

MATT TESAURO — Fri, 10 Jul 2026 17:36:11 GMT

DefectDojo supports over 500 integrations with security tools, making it one of the most flexible vulnerability aggregation platforms available. Scans from SAST, SCA, DAST, IaC, and other security scanners can be imported into DefectDojo and de-duplicated in bulk.

Training: Introduction to Product & Asset Hierarchy

MATT TESAURO — Thu, 28 May 2026 17:33:42 GMT

DefectDojo makes it easy to run scans across different teams, business units, and repositories. But when setting up an asset hierarchy, there are multiple considerations and potential impacts to how you report, provision RBAC, and run CI/CD pipelines.

May Office Hours: Spring Roadmap

GREG ANDERSON — Fri, 08 May 2026 16:35:35 GMT

Spring is upon us, and we have a number of new features, releases, and even products that we’re excited to share with the DefectDojo community. At long last, DefectDojo v3 will be coming out soon, along with brand new things we’ve been working on for the community and pro versions.

CRA Ready: Governance, Vulnerability Management & Beyond

Frank Morris — Tue, 07 Apr 2026 17:36:40 GMT

The EU Cyber Resilience Act (CRA) is reshaping how organizations design, develop, and maintain digital products — and the clock is ticking. With sweeping requirements that touch everything from secure-by-design principles to mandatory vulnerability disclosure, security leaders can no longer afford a wait-and-see approach.

April Office Hours: Why Can’t We Trust Any Security Tool

TRACY WALKER — Mon, 06 Apr 2026 17:13:17 GMT

The foundational principle of defense in depth says no single security layer is impenetrable: never trust any layer, always use multiple layers, always assume you are already breached and are trying to prove otherwise. Security scanners are security layers. No two scanners align 100% of the time. That's not a bug; that's why you should always use more than one.

But what happens when you try to correlate findings across tools? Some security vendors actively make this harder than it needs to be, and not by accident. And when vendors choose to compete as a design choice for security? That is what tells you whose interests the vendor is really protecting.

DefectDojo Day

MATT TESAURO — Mon, 06 Apr 2026 10:26:19 GMT

One full day. Eight sessions. The sharpest minds in vulnerability management — all in one room. Join the community that's redefining how security scales.

March Office Hours: Building Your CRA Vulnerability Management Plan

GREG ANDERSON — Mon, 23 Feb 2026 18:11:29 GMT

The EU’s Cyber Resilience Act (CRA) requirements for companies to report vulnerabilities and incidents are here in 2026. As we get closer to the 2027 deadline, security teams need to start taking proactive steps towards monitoring, reporting, and acting on their vulnerability backlog.

February Office Hours: Getting Started with DefectDojo

MATT TESAURO — Wed, 04 Feb 2026 18:51:11 GMT

New to DefectDojo? Join this introductory webinar to learn how you can use DefectDojo to prioritize, deduplicate, and automate vulnerabilities, SOC alerts, and more.