NeuVector Integration with DefectDojo
NeuVector is a fully open-source, Kubernetes-native container security platform by SUSE that provides comprehensive Zero Trust security with end-to-end vulnerability scanning, runtime protection, network segmentation, compliance auditing, and admission control throughout the container lifecycle from DevOps to production environments. The platform delivers Layer 7 container firewall capabilities, AI-driven threat detection, automated policy enforcement, CIS Benchmark compliance checks, DLP sensors, and advanced runtime security to protect containerized applications and Kubernetes workloads against zero-day attacks, network threats, and security misconfigurations across all major cloud platforms and Kubernetes distributions.
Data Granularity: What Gets Imported
The following fields are captured from NeuVector results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "NeuVector",
"engagement": "<engagement-id>",
"file": "results.json"
}