Skip to content

Platform

By Role

CISORisk posture without the spreadsheet EngineersFindings where you already work Cloud OperationsCoverage across cloud and container scanners

Platform

Platform AI + Dojo Managed AppSec

By Solution

Vulnerability ManagementEvery finding tracked from intake to retest ASPMOne view of application security posture DevSecOpsFindings routed into the pipeline, no hand off SOCScanner findings and alerts in a single queue

Pen TestingRetests tracked in the same system of record PSIRTCVE impact, advisories, and disclosures ComplianceEvidence and SLAs without the spreadsheet CSPMCloud security posture, unified with AppSec

Integrations

500+ integrations, one source of truth

Every SAST, DAST, SCA, cloud, and container scanner in your stack, deduplicated into a single queue.

Dedup active Browse all integrations

SASTStatic analysis findings from your source code DASTDynamic scans of running applications

SCAVulnerabilities in open source dependencies Cloud & ContainerPosture and image findings across environments

CI/CDIngest results straight from the pipeline TicketingCreate and track remediation tickets automatically

Resources

Connect

CommunityJoin a global network of security professionals building best-in-class solutions for vulnerability management. EventsCheck out live events, upcoming features, and connect with other security professionals.

Learn

BlogAppSec practice, product news, and how-tos Case StudiesHow security teams run DefectDojo in production

WhitepapersDeeper research and guides for download NewsPress, announcements, and milestones

Featured

BlogOct 1, 2026 Triage Engine: Turning Vulnerability Data Into Action Read the post

Docs

Docs

DocumentationOfficial docs for the Pro and Open Source editions API ReferenceEvery endpoint, parameter, and response

Deployment GuidesInstall, configure, and scale your instance ChangelogWhat shipped in each release

Docs for both editions

Official documentation for DefectDojo Pro and Open Source editions, maintained by DefectDojo, Inc. and the Open Source community.

Pro + Community Search the docs

Company

Company

Why DefectDojoThe case for one system of record AboutWho we are and where we came from

PartnersPrograms for resellers and integrators

Reach out

Need some help? Pro users can send an email to support@defectdojo.com.

Contact us

Pricing

Get Started Ready to go Pro?Request a quote from the DefectDojo, Inc. team and be up and running this week. Request a quote See Pricing Tiers that scale with your team.Straightforward pricing with no per-scanner surprises. View tiers

Still not convinced?

Run the free one first.

Community Edition is the full open source platform, in production at 10,000+ organizations. Prove it in your stack, then bring the same system of record to Pro.

Free forever Get Community Edition

Login Book a demo

DAST

WHAT'S ACTUALLY EXPOSED, NOT WHAT MIGHT BE.

Runtime findings from every DAST tool, normalized alongside the rest of your stack.

DefectDojo parses every major dynamic scanning tool into one data model, so results from different scanners are finally comparable. Run one DAST tool or five; the findings land in the same deduplicated queue. Dynamic scans of running applications, with the HTTP evidence that confirmed each finding.

Browse all integrations

All Integrations29 Integration Guides

Every DAST Tool We Parse

If your scanner writes a report, DefectDojo reads it. Browse the full DAST catalog below; every parser normalizes into the same finding model.

42Crunch

DAST

View integration

Acunetix

DAST

View integration

AppCheck

DAST

View integration

AppSpider (Rapid7)

DAST

View integration

Arachni

DAST

View integration

Burp Enterprise

DAST

View integration

Cobalt.io

DAST

View integration

Crashtest Security

DAST

View integration

Edgescan

DAST

View integration

GitLab

Cloud and Container

View integration

HCL AppScan

DAST

View integration

IBM AppScan

DAST

View integration

Immuniweb

DAST

View integration

Invicti

DAST

View integration

Microfocus Webinspect

DAST

View integration

MobSF

SAST

View integration

Mozilla Observatory

DAST

View integration

Netsparker

DAST

View integration

Nikto

DAST

View integration

Nuclei

DAST

View integration

Qualys

Cloud and Container

View integration

StackHawk

DAST

View integration

Tenable

Cloud and Container

View integration

Veracode

SAST

View integration

Wapiti

DAST

View integration

Wfuzz

DAST

View integration

WhiteHat Sentinel

DAST

View integration

Wpscan

DAST

View integration

ZAP

DAST

View integration

Get your backlog to zero.

See DefectDojo run with your own stack. Thirty minutes with the technical team, not a sales pitch.

Built by the OWASP community, for the people who refuse to accept the status quo.

Platform

Overview
AI and Dojo
Managed AppSec
Integrations

Solutions

Vulnerability management
Application security posture
DevSecOps
Compliance

Resources

Blog
Community
Events
Case studies

Company

Why DefectDojo
About
Partners
Contact

© 2026 DefectDojo Inc. All Rights Reserved. Privacy Policy Trust Center DefectDojo Status

0000 0000