SAST

ALL OF YOUR STATIC SCANNERS. NONE OF THE NOISE.

Every static scanner you run, distilled into findings worth fixing.

DefectDojo parses every major static analysis tool into one data model, so results from different scanners are finally comparable. Run one SAST tool or five; the findings land in the same deduplicated queue.

Browse all integrations

All Integrations42 Integration Guides

Every SAST Tool We Parse

If your scanner writes a report, DefectDojo reads it. Browse the full SAST catalog below; every parser normalizes into the same finding model.

Bandit

SAST

View integration

Bearer CLI

SAST

View integration

Brakeman

SAST

View integration

Checkmarx One

Cloud and Container

View integration

Codechecker

SAST

View integration

CodeQL

SAST

View integration

Contrast Security

SAST

View integration

CredScan

SAST

View integration

DawnScanner

SAST

View integration

Detect-secrets

SAST

View integration

ESLint

SAST

View integration

Fortify

SAST

View integration

GitGuardian Ggshield

SAST

View integration

GitHub Advanced Security

SAST

View integration

GitLab

Cloud and Container

View integration

Gitleaks

SAST

View integration

Gosec

SAST

View integration

Horusec

SAST

View integration

Kiuwan

SAST

View integration

KrakenD

SAST

View integration

Legitify

SAST

View integration

MobSF

SAST

View integration

Nosey Parker

SAST

View integration

PHP Security Audit v2

SAST

View integration

PMD

SAST

View integration

Progpilot

SAST

View integration

PWN Security Automation Framework

SAST

View integration

ReversingLabs

SCA

View integration

Rubocop

SAST

View integration

Rusty Hog

SAST

View integration

Scantist

SCA

View integration

Semgrep

SAST

View integration

Solar Appscreener

SAST

View integration

SonarQube

SAST

View integration

SpotBugs

SAST

View integration

Synopsys Coverity

SAST

View integration

Talisman

SAST

View integration

Trufflehog

SAST

View integration

Veracode

SAST

View integration

Visual Code Grepper (VCG)

SAST

View integration

Whispers

SAST

View integration

Xanitizer

SAST

View integration

ALL OF YOUR STATIC SCANNERS. NONE OF THE NOISE.

Every SAST Tool We Parse

Bandit

Bearer CLI

Brakeman

Checkmarx One

Codechecker

CodeQL

Contrast Security

CredScan

DawnScanner

Detect-secrets

ESLint

Fortify

GitGuardian Ggshield

GitHub Advanced Security

GitLab

Gitleaks

Gosec

Horusec

Kiuwan

KrakenD

Legitify

MobSF

Nosey Parker

PHP Security Audit v2

PMD

Progpilot

PWN Security Automation Framework

ReversingLabs

Rubocop

Rusty Hog

Scantist

Semgrep

Solar Appscreener

SonarQube

SpotBugs

Synopsys Coverity

Talisman

Trufflehog

Veracode

Visual Code Grepper (VCG)

Whispers

Xanitizer

Get your backlog to zero.