Twistlock Integration with DefectDojo
Twistlock (now Prisma Cloud Compute Edition) was a comprehensive container security platform that provided full lifecycle protection for containerized environments and serverless workloads by performing vulnerability scanning, runtime defense, compliance monitoring, network segmentation, and cloud-native firewall capabilities across container images, hosts, and orchestration platforms including Docker and Kubernetes. The platform was acquired by Palo Alto Networks in July 2019 for approximately $410 million and integrated into Prisma Cloud, where it continues to deliver automated security assessments with machine learning-driven threat detection, policy enforcement throughout CI/CD pipelines, and comprehensive protection from development through production across multi-cloud and hybrid environments.
Data Granularity: What Gets Imported
The following fields are captured from Twistlock results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "Twistlock",
"engagement": "<engagement-id>",
"file": "results.json"
}