Name: DefectDojo
Rating: 8 (1 reviews)
Author: 10Security

Help Desk

Web and Video Conferencing

Customer Support

Agile Development

Image Recognition

Interactive Application Security Testing (IAST)

Service Mesh

Development

Alumni Management

Education

Business Intelligence (BI)

Collaboration

Contract Management

Streaming Analytics

Supply Chain Management

Enterprise

Accounting

Cash Flow Management

Investor Relations

Finance and Accounting

Applicant Tracking

Corporate Learning Management

HR Management

Payroll

Talent Intelligence

Talent Management

Workforce Analytics

Workforce Management

Human Resources

Application Lifecycle Management (ALM)

Cloud Storage

Data Integration

Data Lakehouse

Data Mapping

Database Load Balancing

Database Performance Monitoring

Debugging

Edge Computing

Ethernet Switches

Event Monitoring

Fraud Detection

Governance, Risk & Compliance

Integration Platform as a Service (iPaaS)

Internet Security

Managed Detection and Response (MDR)

Managed Hosting

Master Data Management (MDM)

Network Diagnostics

Network Performance Monitoring

Packet Analyzer

SQL Server Performance Monitoring

Storage Management

Tape Storage

Threat Intelligence

Virtual Private Cloud (VPC)

Information Technology

A/B Testing

AI Writing Assistant Software

Ad Serving & Retargeting

All-in-One Marketing

Community

Content Management

Digital Rewards

Email Marketing

Marketing Analytics

Marketing Automation

Predictive Analytics

Social Media Management

Survey & Forms Building

Video

Video Collaboration

Web Analytics

Marketing

Interactive Whiteboard

Project Management

Professional Services

Customer Relationship Management (CRM)

Sales

Application Security

Microsegmentation

Security

3D Modeling

Animation

Computer-Aided Design (CAD)

Municipal

Vertical-Specific

Find top rated software and services based on in-depth reviews from verified users. 400+ software categories including PaaS, NoSQL, BI, HR, and more.

Action1

Tenable Nessus

Tenable

Qualys TruRisk Platform

Qualys

Rapid7 InsightVM

Rapid7

Tenable Vulnerability Management

Trellix ePolicy Orchestrator

Trellix (FireEye + McAfee)

Qualys VMDR

Tenable Security Center

Vulcan Cyber (discontinued)

Discontinued Products

ManageEngine Patch Manager Plus

ManageEngine, A Div of Zoho Corporation Pvt Ltd

Free and Open-Source: Several users have praised DefectDojo for being free to use and open-source, making it accessible to a wide range of users. This has been particularly appreciated by those looking for a cost-effective solution or who value the transparency and flexibility that comes with an open-source tool.

Robust APIs and Integration Capabilities: The robust APIs of DefectDojo have been highly regarded by reviewers as they make the tool easy to use and integrate with other tools. The availability of API specifications in OpenAPI format further facilitates the integration process, allowing seamless communication between different systems.

Clean Interface and User-Friendly Management Features: Many users have commended DefectDojo's clean interface for its ease of use in managing and reporting vulnerabilities. The intuitive design allows for efficient navigation and task completion, making it a preferred choice among users regardless of their level of experience in vulnerability management.

Long Bug Fix Times: Some users have reported that it has taken a significant amount of time to get bugs fixed in DefectDojo since it is an open-source tool. While most bugs are addressed promptly, some fixes can take up to a month.

Deployment Issues: Users have occasionally encountered problems during deployment, including dependency errors during the initial installation of DefectDojo.

Limited Tool Integration: Several users have mentioned that there are very few tools supported with direct console integration in DefectDojo, which means they have to manually import scan files. This lack of automatic import and direct tool integration can be inconvenient for users.

DefectDojo has proven to be a valuable tool for users in various use cases. Users have been able to log vulnerabilities manually or automate the process, saving significant time and effort. The integration capabilities of DefectDojo with popular communication tools such as Jira and Slack have been well received by the VAPT team, enabling seamless collaboration and timely resolution of vulnerabilities. 

One key feature that sets DefectDojo apart is its ability to de-duplicate vulnerabilities, providing a single console for tracking and managing vulnerabilities, eliminating confusion and ensuring efficient remediation efforts. With DefectDojo's vulnerability templating system, vulnerability scanner imports, report production, and metrics, security experts have been able to streamline their workflow and tackle vulnerability management more effectively. 

In some cases, users have even integrated DefectDojo with other tools like Caldera for vulnerability assessment. This integration allows reports generated by Caldera to be seamlessly pushed to DefectDojo, further enhancing the vulnerability management process. Additionally, DefectDojo has been used to scan internal servers for vulnerability management purposes, with the results easily imported into other tools, demonstrating its versatility in accommodating diverse user needs and workflows. Overall, DefectDojo has proved instrumental in facilitating vulnerability management tasks with proper SLA adherence and stakeholder scanning.

Automox is an endpoint management platform built for the era of autonomous operations. It provides a cloud-native foundation that unifies automation, speed, visibility, and trust.

Automox

CrowdStrike offers the Falcon Endpoint Protection suite, an antivirus and endpoint protection system emphasizing threat detection, machine learning malware detection, and signature free updating. Additionally the available Falcon Spotlight module delivers vulnerability assessment with no performance impact, no additional agents, hardware, scheduled scans, firewall exceptions or admin credentials.

Falcon Pro

Falcon Enterprise

Falcon Go (Small Business)

CrowdStrike Falcon

DefectDojo

Vulnerability Management Software scans discovered IT assets for known vulnerabilities, i.e. configurations and setups that are open to security threats and malware. To make these scans effective, vulnerability management suites and platforms often must operate in tandem with a security or threat intelligence platform, a repository of ever-expanding known threats.

Vulnerability Management

10Security

Vulnerability Management Tools

Tools that focus on locating, identifying, and prioritizing vulnerabilities in a network that need to be patched.

IT Asset Realization

Scans a network to identify hardware and software assets on the network.

Authentication

Authentication of users and services within a network to prevent vulnerabilities from being introduced to the network.

Configuration Monitoring

Constant monitoring of a network set up to identify vulnerabilities as they occur within the network or tech stack on the network.

Web Scanning

Specifically scans webpages for potential threats or vulnerabilities.

Vulnerability Intelligence

Software that is able to label and store information about vulnerabilities to access for future use cases.

Features for categories that leverage threat intelligence in network security

Network Analytics

Analyzes various data reports and logs (DNS, firewall, user data, security information etc.) to identify threats in a network.

Vulnerability Classification

Prioritizing vulnerabilities, to determine which vulnerabilities are most urgent and require a quicker resolution.

Automated Alerts and Reporting

Systems in place to automatically alert, report, or notify of issues that may need timely remediation.

Threat Analysis

Analyzing known factors such as behavior patterns, affected areas, and other specific features to more easily identify a threat.

Threat Intelligence Reporting

Generates reports that display information on threats (such as name, type, frequency of attack, area affected, etc.)

Automated Threat Identification

Leveraging multiple sources of information (such as threat intelligence databases) to automatically identify threats.

Threat Recognition

Detection and recognition of malicious software within a network that could pose a threat to sensitive information.

TrustRadius is a technology and business research firm based in Austin, Texas. The company is known as a review platform for verified B2B technology and software reviews through a proprietary algorithm and human verification.

TrustRadius

Home