Crashtest Security Integration with DefectDojo
Crashtest Security is a SaaS-based dynamic application security testing (DAST) solution that performs automated vulnerability scanning of web applications, APIs, and microservices to identify security flaws including OWASP Top 10 vulnerabilities, with seamless CI/CD integration for continuous security testing throughout the development lifecycle. The platform provides advanced crawling capabilities, configurable scan depth and speed, low false-positive results, and detailed remediation guidance to enable development teams to detect and fix security issues before production deployment.
Data Granularity: What Gets Imported
The following fields are captured from Crashtest Security results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "Crashtest Security",
"engagement": "<engagement-id>",
"file": "results.json"
}