Scout Suite Integration with DefectDojo
Scout Suite is an open-source multi-cloud security auditing tool developed by NCC Group that enables security posture assessment of cloud environments by using cloud provider APIs to gather configuration data, analyze security settings, and identify misconfigurations, vulnerabilities, and compliance violations across AWS, Azure, Google Cloud Platform, Alibaba Cloud, and Oracle Cloud Infrastructure. The platform generates comprehensive HTML reports that highlight risk areas with a clear view of the attack surface, providing security consultants, auditors, and DevOps teams with point-in-time security-oriented assessments and detailed findings aligned with industry best practices including CIS Benchmarks to proactively strengthen cloud security posture.
Data Granularity: What Gets Imported
The following fields are captured from Scout Suite results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "Scout Suite",
"engagement": "<engagement-id>",
"file": "results.json"
}