Microfocus Webinspect Integration with DefectDojo
OpenText Fortify WebInspect (formerly Micro Focus WebInspect) is a dynamic application security testing (DAST) solution that performs automated security assessments of web applications, APIs, and services by simulating real-world attack techniques to identify vulnerabilities including SQL injection, cross-site scripting, authentication flaws, and other OWASP Top 10 threats across SOAP, REST, GraphQL, and gRPC APIs. The platform provides comprehensive crawling with support for multi-factor authentication environments, HAR file workflow scanning, interactive application security testing (IAST) capabilities, and pre-configured compliance reporting aligned with PCI-DSS, NIST 800-53, ISO 27001, and HIPAA to enable organizations to detect and remediate exploitable security weaknesses throughout the software development lifecycle.
Data Granularity: What Gets Imported
The following fields are captured from Microfocus Webinspect results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "Microfocus Webinspect",
"engagement": "<engagement-id>",
"file": "results.json"
}