Trustwave Integration with DefectDojo
Trustwave is a comprehensive managed security services provider that delivers managed detection and response (MDR), penetration testing, database security, email security, digital forensics and incident response, vulnerability scanning, and threat intelligence services through its cloud-based Fusion platform and elite SpiderLabs research team to protect organizations against cyber threats. The platform provides 24/7/365 threat monitoring and response capabilities with support for 360+ telemetry sources, integration with leading technologies including Microsoft Security, and flexible deployment models with onshore, offshore, and federally cleared security experts to help organizations across 96 countries detect threats, ensure compliance with regulatory standards including ISO 27001, NIST CSF, PCI-DSS, and FedRAMP, and strengthen overall cybersecurity posture throughout the enterprise security lifecycle.
Data Granularity: What Gets Imported
The following fields are captured from Trustwave results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "Trustwave",
"engagement": "<engagement-id>",
"file": "results.json"
}