Introduction to Reporting in DefectDojo

You've imported your scan data and triaged your findings. Now you need to prove the following: an engineer needs a list of what to fix, an auditor needs evidence of compliance, and leadership wants to know whether risk is trending down.

This session covers the fundamentals of reporting in DefectDojo, from the metrics the platform tracks automatically to building polished, reusable reports. We'll cover:

• How DefectDojo's asset hierarchy shapes the scope of any report
• The metrics and dashboards available out of the box
• Building custom reports in DefectDojo Pro's Report Builder with reusable Themes, Blocks, and Templates
• Why generated reports are frozen in time, and how to re-run a template when you need a fresh snapshot
• Automating recurring reports through the REST API

Whether you're running Community Edition or DefectDojo Pro, you'll leave knowing how to turn your findings data into a report you can hand to engineers, auditors, and executives.

Speaker

Matt Tesauro

CTO & Co-Founder

DefectDojo