Contact Us
  • Billed Annually
  • Billed Monthly
Save 20% with annual billing

OWASP Edition

Get the leading application vulnerability management tool. Built for both DevSecOps and traditional application security.

Self-hosted

$0

Free forever
  • Open-Source
  • Vulnerability Management
  • CI/CD Integration
  • Community Support

Dojo Pro

Designed for businesses that require advanced features and support. This tier provides exceptional value for growing teams.

Starting at

$1250/month

Manage up to 20,000 Findings/Endpoints
Create an account

Everything in OWASP Edition +

  • Automatic Updates
  • Tunable Deduplication
  • Maintenance Scheduler
  • Platform Manager
  • Slack, Teams and Email Notifications
  • Enhanced Insights & Dashboards
  • Smart Upload with Predictive Finding Placement
  • Next Gen Connectors
  • Advanced Report Generator
  • SAML/OAuth Authentication
  • Premium Support

Dojo Enterprise

Tailored for corporations that need advanced security, integration, and premium support options. Built for frictionless scale.

 

Custom Packages

Manage an excess of 50,000 Findings/Endpoints
Contact Sales

Everything in Pro +

  • Self-hosting available
  • White-glove implementation and onboarding assistance
  • Dedicated Account Manager

OWASP Edition

Get the leading application vulnerability management tool. Built for both DevSecOps and traditional application security.

Self-hosted

$0

Free forever
  • Open-Source
  • Vulnerability Management
  • CI/CD Integration
  • Community Support

Dojo Pro

Designed for businesses that require advanced features and support. This tier provides exceptional value for growing teams.

Starting at

$1650/month

Manage up to 20,000 Findings/Endpoints
Create an account

Everything in OWASP Edition +

  • Automatic Updates
  • Tunable Deduplication
  • Maintenance Scheduler
  • Platform Manager
  • Slack, Teams and Email Notifications
  • Enhanced Insights & Dashboards
  • Smart Upload with Predictive Finding Placement
  • Next Gen Connectors
  • Advanced Report Generator
  • SAML/OAuth Authentication
  • Premium Support

Dojo Enterprise

Tailored for corporations that need advanced security, integration, and premium support options. Built for frictionless scale.

 

Custom Packages

Manage an excess of 50,000 Findings/Endpoints
Contact Sales

Everything in Pro +

  • Self-hosting available
  • White-glove implementation and onboarding assistance
  • Dedicated Account Manager

Compare Plans

See detailed breakout features included with each DefectDojo plan.

Usage and Scale
OWASP Edition
DOJO PRO
Unlimited Product Types, Products, Engagements & Tests
Unlimited Remote Support
 check
Unlimited Support Tickets
 check
Unlimited Support Hours
 check

Integration & Automation
OWASP Edition
DOJO PRO
CI/CD Automation & Tracking
Track Branch / Server / Repo
 check check
CVE and CWE Integration
 check check
Importing Scan Results
 check check
Integration with Testing Tools
 check check
JIRA Integration
 check check
Supports Manual and Automated Security Work
 check check
Slack, Teams, & Email Notifications
 check check
Security Tool Connectors
 check
Smart Upload
 check
Support Maintenance Window Schedule
 check

Inventory & Management
OWASP Edition
DOJO PRO
Application inventory with Metadata
Automated Deduplication
 check check
Engagement Tracking & Calendar
 check check
False Positive Tracking of Findings
 check check
Historical knowledge of past assessments
 check check
Tagging on Multiple Levels
 check check
Vulnerability Management
 check check
Vulnerability Tracking
 check check
Risk Scoring and Prioritization
 check check

Reporting & Dashboards
OWASP Edition
DOJO PRO
Compliance Reporting
Custom Reporting
 check check
Engagement Reporting
 check check
Product Reporting
 check check
Test Reporting
 check check
Vulnerability Trend Metrics
 check check
Automated Report Digest
 check
Customizable Enhanced Dashboards
 check

Collaboration & Access
OWASP Edition
DOJO PRO
Collaboration Tools
User Access Control
 check check
SAML/OAuth Authentication
 check

Remediation & Support
OWASP Edition
DOJO PRO
Remediation & Finding Templates
Set remediation SLAs based on the criticality
 check check
Customized Remediation Advice
 check
Guaranteed SLA Support
 check
Implementation Support
 check

Pricing FAQs

Choosing the right plan for your security and vulnerability management is vital. We're here to help you find the perfect fit.

Is hosting available for DefectDojo?
+

Yes. Our Pro and Enterprise plans include hosting starting at 10gb, 25gb, and up.

Do the plans come with implementation support?
+

Yes, all our DefectDojo paid plans come with access to our implementation support team. We are here to help with your vulnerability management needs.

Do the plans come with technical support?
+

Yes, our commercial support includes response time SLA, bug fixes, feature enhancements, and best practice advice directly from the creators of DefectDojo. The open source version includes community-based support from the OWASP slack.

Is there a trial period for DefectDojo?
+

Yes, to start a trial/PoC of DefectDojo Pro, please contact us. Someone will reach out to set up a short discussion with one of our Solution Architects. We also have an OWASP community version and OWASP Edition sandbox to familiarize yourself with our platform.

Can I switch between DefectDojo plans?
+

Of course! Whether you're scaling up or need a more compact solution, we've got you covered.

What payment methods do you accept for DefectDojo?
+

For monthly plans, we accept major credit cards and popular online payment gateways. Transactions are secure and efficient. Please contact us to learn more about ACH or wire transfer payment options. We work with our Enterprise clients to customize each agreement to meet the needs of their organization.

Are there any additional fees apart from the listed prices?
+

With DefectDojo, transparency is our aim. The prices listed for our plans are all-inclusive. No surprise charges or hidden fees. Please Contact Us if you're interested in additional professional services like one-off feature enhancements, or intensive DevSecOps training sessions for large teams.