Solar Appscreener Integration with DefectDojo
Solar appScreener is a comprehensive static application security testing (SAST) tool that analyzes source code and binary executables across 36 programming languages to identify security vulnerabilities, backdoors, and undocumented features using proprietary Fuzzy Logic Engine technology that minimizes false positives while detecting issues including SQL injection, XSS, and hardcoded credentials. The platform provides unique binary static analysis capabilities with code reconstruction from executables including mobile apps from Google Play and App Store links, software composition analysis (SCA) for third-party dependencies, integration with CI/CD pipelines and issue tracking systems like Jira, and flexible reporting aligned with PCI-DSS, OWASP, HIPAA, and CWE standards to enable security teams and developers to strengthen application security throughout the software development lifecycle.
Data Granularity: What Gets Imported
The following fields are captured from Solar Appscreener results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "Solar Appscreener",
"engagement": "<engagement-id>",
"file": "results.json"
}