DefectDojo

DefectDojo is a security orchestration andvulnerability management platform.DefectDojo allows you to manage your application security program, maintainproduct and application information, triage vulnerabilities andpush findings to systems like JIRA and Slack. DefectDojo enriches andrefines vulnerability data using a number of heuristic algrothims thatimprove with the more you use the platform.

Demo

Try out the demo sever at demo.defectdojo.org

Log in with admin / defectdojo@demo#appsec. Please note that the demo is pubicly accessable and regularly reset. Do not put sensitive data in the demo.

Quick Start

git clone https://github.com/DefectDojo/django-DefectDojo
cd django-DefectDojo
# building
docker-compose build
# running
docker-compose up
# obtain admin credentials. the initializer can take up to 3 minutes to run
# use docker-compose logs -f initializer to track progress
docker-compose logs initializer | grep "Admin password:"

Navigate to http://localhost:8080.

Documentation

Getting Started

REST APIs

Client APIs and Wrappers

Release and Branch Model

Contributing

Roadmap

Wishlist

Supported Installation Options

• Docker / Docker Compose
• godojo

Community, Getting Involved, and Updates

Join the slack community and discussion! Realtime discussion is done in the OWASP Slack Channel, #defectdojo.Follow DefectDojo on Twitter, Linkedin, and YouTube for project updates!

Commercial Support and Training

Commercial support and training is availaible through 10Security.

10Security was founded by the creators of DefectDojo.For information please email info@10security.com or visit our site.

About Us

DefectDojo is maintained by:

• Greg Anderson
• Aaron Weaver (@weavera)
• Matt Tesauro (@matt_tesauro)

Project Moderators

Project Moderators can help you with pull requests or feedback on dev ideas.

• Alex Dracea
• Valentijn Scholten (sponsor | linkedin)
• Jannik Jürgens
• Fred Blaise
• Cody Maffucci
• Pascal Trovatelli / Sopra Steria
• Damien Carol
• Stefan Fleckenstein

Hall of Fame

• Charles Neill (@ccneill) – Charles served as aDefectDojo Maintainer for years and wrote some of Dojo's core functionality.
• Jay Paz (@jjpaz) – Jay was a DefectDojomaintainer for years. He performed Dojo's first UI overhaul, optimized code structure/features, and added numerous enhancements.

Sponsors

License

DefectDojo is licensed under the BSD Simplified license