OpenVAS Integration with DefectDojo
OpenVAS is an open-source full-featured vulnerability scanner developed and maintained by Greenbone Networks that performs authenticated and unauthenticated security testing across network infrastructure, servers, workloads, and devices using a continuously updated vulnerability feed with over 100,000 tests to identify security exposures, misconfigurations, and compliance issues. The platform supports various high-level and low-level internet and industrial protocols with performance tuning for large-scale scans, providing comprehensive vulnerability detection with severity-based risk scoring to enable organizations to proactively discover and remediate security weaknesses before they can be exploited by attackers.
Data Granularity: What Gets Imported
The following fields are captured from OpenVAS results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "OpenVAS",
"engagement": "<engagement-id>",
"file": "results.json"
}