Pricing - DefectDojo

Dojo Pro

Get a custom quote

As security professionals, we feel per app/user pricing acts like ransomware, forcing security teams to try to find additional budget mid-cycle. This is why we offer a license model that gives customers more control over their license and spend.

DefectDojo’s pricing model is based on what you store for two reasons:

You can cleanup data and always stay within license when necessary between budget cycles.
It is the metric most closely associated with the cost to deliver services, as our auto-triage functions run over the entirety of your data.

DefectDojo Features		Free		Pro
Core finding import & deduplication
Authentication (username, LDAP, SAML, OAuth)
Role-based access control (RBAC)
REST API & Swagger UI
Manual import & reimport
Basic dashboard & reporting
Automation (Rules Engine)
Tunable deduplication
Background imports
CLI & integrations (Snyk, SonarQube, AWS, etc.)
Universal parser (CSV/JSON)
Customizable dashboards & dark mode
Cloud-hosted option
Multi-factor authentication (MFA)
Premium support & SLAs
SOC & AppSec integration
MCP Integration
Tenant isolation & encryption at rest

DefectDojo Features

Core finding import & deduplication
Free:	Pro:

Authentication (username, LDAP, SAML, OAuth)
Free:	Pro:

Role-based access control (RBAC)
Free:	Pro:

REST API & Swagger UI
Free:	Pro:

Manual import & reimport
Free:	Pro:

Basic dashboard & reporting
Free:	Pro:

Automation (Rules Engine)
Free:	Pro:

Tunable deduplication
Free:	Pro:

Background imports
Free:	Pro:

CLI & integrations (Snyk, SonarQube, AWS, etc.)
Free:	Pro:

Universal parser (CSV/JSON)
Free:	Pro:

Customizable dashboards & dark mode
Free:	Pro:

Cloud-hosted option
Free:	Pro:

Multi-factor authentication (MFA)
Free:	Pro:

Premium support & SLAs
Free:	Pro:

SOC & AppSec integration
Free:	Pro:

MCP Integration
Free:	Pro:

Tenant isolation & encryption at rest
Free:	Pro: