Platform

By Role

CISORisk posture without the spreadsheet EngineersFindings where you already work Cloud OperationsCoverage across cloud and container scanners

Platform

Platform AI + Dojo Managed AppSec

By Solution

Vulnerability ManagementEvery finding tracked from intake to retest ASPMOne view of application security posture DevSecOpsFindings routed into the pipeline, no hand off SOCScanner findings and alerts in a single queue

Pen TestingRetests tracked in the same system of record PSIRTCVE impact, advisories, and disclosures ComplianceEvidence and SLAs without the spreadsheet CSPMCloud security posture, unified with AppSec

Integrations

500+ parsers, one source of truth

Every SAST, DAST, SCA, cloud, and container scanner in your stack, deduplicated into a single queue.

Dedup active Browse all integrations

SASTStatic analysis findings from your source code DASTDynamic scans of running applications

SCAVulnerabilities in open source dependencies Cloud & ContainerPosture and image findings across environments

CI/CDIngest results straight from the pipeline TicketingCreate and track remediation tickets automatically

Resources

Connect

CommunityJoin a global network of security professionals building best-in-class solutions for vulnerability management. EventsCheck out live events, upcoming features, and connect with other security professionals.

Learn

BlogAppSec practice, product news, and how-tos Case StudiesHow security teams run DefectDojo in production

WhitepapersDeeper research and guides for download NewsPress, announcements, and milestones

Featured

BlogJun 2, 2026 DefectDojo v3 Is Here: A Ground-Up Rebuild for the Modern Security Team Read the post

Docs

Docs

DocumentationOfficial docs for the Pro and Open-Source editions API ReferenceEvery endpoint, parameter, and response

Deployment GuidesInstall, configure, and scale your instance ChangelogWhat shipped in each release

Docs for both editions

Official documentation for DefectDojo Pro and Open-Source editions, maintained by DefectDojo, Inc. and the Open-Source community.

Pro + OSS Search the docs

Company

Company

Why DefectDojoThe case for one system of record AboutWho we are and where we came from

PartnersPrograms for resellers and integrators

Reach out

Need some help? Pro users can send an email to support@defectdojo.com.

Contact us

Pricing

Get Started Ready to go Pro?Request a quote from the DefectDojo, Inc. team and be up and running this week. Request a quote See Pricing Tiers that scale with your team.Straightforward pricing with no per-scanner surprises. View tiers

Still not convinced?

Run the free one first.

Community Edition is the full open-source platform, in production at 10,000+ organizations. Prove it in your stack, then bring the same system of record to Pro.

Free forever Get Community Edition

Login Book a demo

Cloud and Container

THE CLOUD SPRAWLS ACROSS EVERYTHING. YOUR FINDINGS SHOULDN'T.

CSPM, container, and workload findings, aggregated into one system of action.

DefectDojo parses every major cloud and container scanning tool into one data model, so results from different scanners are finally comparable. Run one Cloud and Container tool or five; the findings land in the same deduplicated queue. Posture and image findings across every environment, from registry to cluster.

Browse all integrations

All Integrations37 Events

Every Cloud and Container Tool We Parse

If your scanner writes a report, DefectDojo reads it. Browse the full Cloud and Container catalog below; every parser normalizes into the same finding model.

Akamai

Cloud and Container

View integration

Anchore Enterprise

Cloud and Container

View integration

Aqua Security

Cloud and Container

View integration

Arachni

Cloud and Container

View integration

Azure Security Center

Cloud and Container

View integration

Cargo Audit

Cloud and Container

View integration

Checkov

Cloud and Container

View integration

Chef

Cloud and Container

View integration

Clair

Cloud and Container

View integration

Cloudsploit

Cloud and Container

View integration

Docker

Cloud and Container

View integration

Dockle

Cloud and Container

View integration

Hadolint Dockerfile check

Cloud and Container

View integration

Harbor Vulnerability

Cloud and Container

View integration

KICS

Cloud and Container

View integration

kube-bench

Cloud and Container

View integration

KubeHunter

Cloud and Container

View integration

Kubescape

Cloud and Container

View integration

NeuVector

Cloud and Container

View integration

Nexpose

Cloud and Container

View integration

Nmap

Cloud and Container

View integration

OpenVAS

Cloud and Container

View integration

Popeye

Cloud and Container

View integration

Prowler

Cloud and Container

View integration

Red Hat

Cloud and Container

View integration

Scout Suite

Cloud and Container

View integration

ssh-audit

Cloud and Container

View integration

SSL Labs

Cloud and Container

View integration

Sslscan

Cloud and Container

View integration

Sslyze

Cloud and Container

View integration

Sysdig

Cloud and Container

View integration

testssl

Cloud and Container

View integration

tfsec

Cloud and Container

View integration

Trivy

Cloud and Container

View integration

Twistlock

Cloud and Container

View integration

Wazuh

Cloud and Container

View integration

Wiz

Cloud and Container

View integration

Get your backlog to zero.

See DefectDojo run with your own stack. Thirty minutes with the technical team, not a sales pitch.

Built by the OWASP community, for the people who refuse to accept the status quo.

Platform

Overview
AI and Dojo
Managed AppSec
Integrations

Solutions

Vulnerability management
Application security posture
DevSecOps
Compliance

Resources

Blog
Community
Events
Case studies

Company

Why DefectDojo
About
Partners
Contact

© 2026 DefectDojo Inc. All Rights Reserved. Privacy Policy Trust Center DefectDojo Status

0000 0000