PWN Security Automation Framework Integration with DefectDojo
PWN Security Automation Framework is an open-source security automation framework that enables security professionals to build custom automation drivers by combining pre-built modules for tasks including static application security testing (SAST), penetration testing, and vulnerability scanning across various security tools and technologies. The framework promotes interoperability with commercial and open-source security tools through a modular architecture that allows users to test, record, replay, and deploy custom security automation packages, integrating with industry-recognized solutions to streamline security assessments and enable continuous security testing throughout the software development lifecycle.
Data Granularity: What Gets Imported
The following fields are captured from PWN Security Automation Framework results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "PWN Security Automation Framework",
"engagement": "<engagement-id>",
"file": "results.json"
}