Edgescan Integration with DefectDojo
Edgescan is a continuous security testing and unified exposure management platform that provides risk-based vulnerability management, penetration testing as a service (PTaaS), dynamic application security testing (DAST), API security testing, network vulnerability management, and attack surface management to identify, validate, and prioritize security vulnerabilities across applications, APIs, networks, and cloud infrastructure. The platform eliminates false positives through manual validation by certified security experts and delivers risk-prioritized intelligence using proprietary scoring systems combined with industry standards including CVSS, EPSS, and CISA KEV to enable organizations to efficiently remediate critical exposures throughout the software development lifecycle.
Data Granularity: What Gets Imported
The following fields are captured from Edgescan results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "Edgescan",
"engagement": "<engagement-id>",
"file": "results.json"
}