WhiteHat Sentinel Integration with DefectDojo
WhiteHat Sentinel (now Synopsys WhiteHat Dynamic) is a cloud-based dynamic application security testing (DAST) platform that combines automated vulnerability scanning with expert human analysis to identify security flaws including SQL injection, cross-site scripting, authentication weaknesses, and business logic vulnerabilities across web applications and APIs throughout the software development lifecycle. The platform provides continuous security assessment with verified, low false-positive findings through expert security analyst review, actionable remediation guidance delivered through an intuitive interface, and seamless integration into DevSecOps workflows to enable organizations to build and maintain secure applications at the speed of business.
Data Granularity: What Gets Imported
The following fields are captured from WhiteHat Sentinel results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "WhiteHat Sentinel",
"engagement": "<engagement-id>",
"file": "results.json"
}