# DefectDojo

> DefectDojo is a vulnerability management and application security posture management (ASPM) platform. It imports findings from 500+ security tools, deduplicates them across tools, prioritizes them by risk, and tracks remediation with SLAs and ticketing integrations such as Jira. DefectDojo is an OWASP Flagship Project. It comes as a free, open-source Community Edition and as DefectDojo Pro, the commercial edition.

Key facts:

- The open-source project began in 2013 and was released publicly in 2015. DefectDojo, Inc. has backed it commercially since 2017.
- Community Edition is free under the BSD 3-Clause license and is self-hosted.
- DefectDojo Pro runs as a managed cloud service or self-hosted, including in air-gapped networks.
- Pro Pay As You Go pricing is $100 per month plus $0.15 per finding processed, with no annual commitment and Sensei AI billed per use.
- Pro can also be pre-paid annually, sized to findings volume, which saves 48% or more over Pay As You Go and includes Sensei AI. Above 1 million findings a year, pricing is a custom agreement.
- DefectDojo Sensei is the AI layer in Pro.

## Product

- [Platform](https://defectdojo.com/platform): How DefectDojo aggregates, deduplicates, prioritizes and remediates security findings
- [Pricing](https://defectdojo.com/pricing): Pay As You Go and pre-pay plans for Pro, and how Pro compares with Community Edition
- [AI and Dojo Sensei](https://defectdojo.com/ai-dojo-sensei): The AI features in DefectDojo Pro
- [Integrations](https://defectdojo.com/integrations): The 500+ security tools DefectDojo imports from, by file import or API connector
- [Why DefectDojo](https://defectdojo.com/why-defectdojo): How DefectDojo differs from other vulnerability management tools

## Solutions

- [ASPM](https://defectdojo.com/aspm): Application security posture management
- [Unified vulnerability management](https://defectdojo.com/unified-vulnerability-management): Risk-based vulnerability management across all tools
- [DevSecOps](https://defectdojo.com/devsecops): Automating vulnerability management in CI/CD
- [Compliance](https://defectdojo.com/compliance): Compliance and audit reporting
- [PSIRT](https://defectdojo.com/psirt): Product security incident response and advisories

## Documentation

- [DefectDojo documentation](https://docs.defectdojo.com/): Guides for Community Edition and Pro
- [About DefectDojo](https://docs.defectdojo.com/get_started/about/about_defectdojo/): Overview of the product and its data model
- [Pro features](https://docs.defectdojo.com/get_started/pro/pro_features/): What DefectDojo Pro adds over Community Edition
- [Supported tools](https://docs.defectdojo.com/supported_tools/): Every supported scanner and file format
- [Connectors](https://docs.defectdojo.com/connectors/about/): API connectors that pull findings from security tools on a schedule
- [Deduplication](https://docs.defectdojo.com/triage_findings/finding_deduplication/about_deduplication/): How DefectDojo finds and merges duplicate findings
- [About Sensei](https://docs.defectdojo.com/sensei/about_sensei/): DefectDojo Sensei documentation
- [REST API v2](https://docs.defectdojo.com/automation/api/api-v2-docs/): The public API
- [Installation](https://docs.defectdojo.com/get_started/open_source/installation/): Installing Community Edition

## Company

- [About](https://defectdojo.com/about): The company and team behind DefectDojo
- [Case studies](https://defectdojo.com/case-studies): Customer stories
- [Trust Center](https://trust.defectdojo.com/): Security, compliance and policies
- [Contact](https://defectdojo.com/contact): Sales and general inquiries

## Optional

- [Source code](https://github.com/DefectDojo/django-DefectDojo): The open-source repository on GitHub
- [OWASP project page](https://owasp.org/www-project-defectdojo/): DefectDojo at OWASP
- [Blog](https://defectdojo.com/blog): Product news and security articles
- [White papers](https://defectdojo.com/white-papers): Buyer's guides for ASPM, DevSecOps and vulnerability management
- [Community](https://defectdojo.com/community): The open-source community program