Contrast Security Integration with DefectDojo
Contrast Security is a Runtime Security Platform that embeds deep security instrumentation directly into applications to provide continuous vulnerability detection, assessment, and protection across the entire software development lifecycle from development to production, combining Interactive Application Security Testing (IAST), Static Application Security Testing (SAST), and Application Detection and Response (ADR) capabilities. The platform leverages in-app sensors to deliver real-time visibility into code execution, identify exploitable vulnerabilities with high accuracy and minimal false positives, detect and block attacks in real-time, and provide AI-powered remediation guidance to accelerate secure code delivery while eliminating the need for disruptive scanning or specialized security experts.
Data Granularity: What Gets Imported
The following fields are captured from Contrast Security results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "Contrast Security",
"engagement": "<engagement-id>",
"file": "results.json"
}