Immuniweb Integration with DefectDojo
ImmuniWeb is an AI-powered application security platform that provides comprehensive security testing and protection through attack surface management, penetration testing as a service, dark web monitoring, vulnerability scanning, and compliance management for web applications, mobile applications, APIs, cloud infrastructure, and third-party systems across over 20 cybersecurity, compliance, and privacy use cases. The platform combines machine learning automation with human security expertise to deliver continuous security testing with a zero false-positives service level agreement, automated risk-based vulnerability prioritization, and actionable remediation guidance while helping organizations meet regulatory compliance requirements including PCI-DSS, GDPR, HIPAA, and ISO 27001 throughout the DevSecOps lifecycle.
Data Granularity: What Gets Imported
The following fields are captured from Immuniweb results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "Immuniweb",
"engagement": "<engagement-id>",
"file": "results.json"
}