Name: DefectDojo
Author: 10Security

Help Desk

Web and Video Conferencing

Customer Support

Cross-Browser Testing

Functional Testing

Product Analytics

Text Editors

Version Control

Development

Student Management

Education

Business Intelligence (BI)

Business Process Management (BPM)

Collaboration

Corporate Social Responsibility (CSR)

Enterprise Feedback Management

Enterprise Search

Online Notary

Enterprise

Accounting

Hedge Fund

Travel Management

Finance and Accounting

Applicant Tracking

Corporate Learning Management

HR Management

Payroll

Talent Intelligence

Talent Management

Workforce Analytics

Workforce Management

Human Resources

Change Management

Cloud Storage

Complex Event Processing

Configuration Management

Converged Network Adapters (CNAs)

Data Center Cooling

Density-Optimized Servers

Firewall

Fraud Detection

Infrastructure Capacity Planning

Integration Platform as a Service (iPaaS)

Mainframe Monitoring

Managed DNS

Network Performance Monitoring

Privileged Access Management

Remote Desktop

SaaS Backup

Software Components

Storage as a Service (STaaS)

System Monitoring

Unified Communications Monitoring

User Virtualization

Website Hosting

Information Technology

A/B Testing

Ad Serving & Retargeting

All-in-One Marketing

Channel Management

Content Management

Data Cleansing

Digital Experience Intelligence

Email Deliverability

Email Marketing

Marketing Automation

Mobile Analytics

Social Media Management

Survey & Forms Building

Web Analytics

Marketing

Project Management

Waste Management

Professional Services

Customer Relationship Management (CRM)

Government Contracting

Sales Enablement

Sales

Intrusion Detection

Operational Technology (OT) Security

Security

Aviation

Awards Management

Direct Secure Messaging

Loan Servicing

Vertical-Specific

Find top rated software and services based on in-depth reviews from verified users. 400+ software categories including PaaS, NoSQL, BI, HR, and more.

Rapid7 InsightVM

Rapid7

SonarQube Server

Sonar

Action1

Tenable Nessus

Tenable

Qualys TruRisk Platform

Qualys

Tenable Vulnerability Management

Trellix ePolicy Orchestrator

Trellix (FireEye + McAfee)

Tenable Security Center

Qualys VMDR

Vulcan Cyber

Panda Patch Management

WatchGuard Technologies

Free and Open-Source: Several users have praised DefectDojo for being free to use and open-source, making it accessible to a wide range of users. This has been particularly appreciated by those looking for a cost-effective solution or who value the transparency and flexibility that comes with an open-source tool.

Robust APIs and Integration Capabilities: The robust APIs of DefectDojo have been highly regarded by reviewers as they make the tool easy to use and integrate with other tools. The availability of API specifications in OpenAPI format further facilitates the integration process, allowing seamless communication between different systems.

Clean Interface and User-Friendly Management Features: Many users have commended DefectDojo's clean interface for its ease of use in managing and reporting vulnerabilities. The intuitive design allows for efficient navigation and task completion, making it a preferred choice among users regardless of their level of experience in vulnerability management.

Long Bug Fix Times: Some users have reported that it has taken a significant amount of time to get bugs fixed in DefectDojo since it is an open-source tool. While most bugs are addressed promptly, some fixes can take up to a month.

Deployment Issues: Users have occasionally encountered problems during deployment, including dependency errors during the initial installation of DefectDojo.

Limited Tool Integration: Several users have mentioned that there are very few tools supported with direct console integration in DefectDojo, which means they have to manually import scan files. This lack of automatic import and direct tool integration can be inconvenient for users.

DefectDojo has proven to be a valuable tool for users in various use cases. Users have been able to log vulnerabilities manually or automate the process, saving significant time and effort. The integration capabilities of DefectDojo with popular communication tools such as Jira and Slack have been well received by the VAPT team, enabling seamless collaboration and timely resolution of vulnerabilities. 

One key feature that sets DefectDojo apart is its ability to de-duplicate vulnerabilities, providing a single console for tracking and managing vulnerabilities, eliminating confusion and ensuring efficient remediation efforts. With DefectDojo's vulnerability templating system, vulnerability scanner imports, report production, and metrics, security experts have been able to streamline their workflow and tackle vulnerability management more effectively. 

In some cases, users have even integrated DefectDojo with other tools like Caldera for vulnerability assessment. This integration allows reports generated by Caldera to be seamlessly pushed to DefectDojo, further enhancing the vulnerability management process. Additionally, DefectDojo has been used to scan internal servers for vulnerability management purposes, with the results easily imported into other tools, demonstrating its versatility in accommodating diverse user needs and workflows. Overall, DefectDojo has proved instrumental in facilitating vulnerability management tasks with proper SLA adherence and stakeholder scanning.

InsightVM is presented as the next evolution of Nexpose, by Rapid7. This Insight cloud-based solution features everything included in Nexpose, such as Adaptive Security and the proprietary Real Risk score, and extends visibility into cloud and containerized infrastructure. InsightVM also offers advanced remediation, tracking, and reporting capabilities not included in Nexpose.

insightIDR

Vulnerability Management

Application Security

Log Management

insignConnect

Automox is an endpoint management solution used to keep desktops, laptops, and servers updated and ready for users anywhere in the world. Using automation, IT can fix critical vulnerabilities and boost user productivity.

Automox

DefectDojo

Vulnerability Management Software scans discovered IT assets for known vulnerabilities, i.e. configurations and setups that are open to security threats and malware. To make these scans effective, vulnerability management suites and platforms often must operate in tandem with a security or threat intelligence platform, a repository of ever-expanding known threats.

10Security

Vulnerability Management Tools

Tools that focus on locating, identifying, and prioritizing vulnerabilities in a network that need to be patched.

IT Asset Realization

Scans a network to identify hardware and software assets on the network.

Authentication

Authentication of users and services within a network to prevent vulnerabilities from being introduced to the network.

Configuration Monitoring

Constant monitoring of a network set up to identify vulnerabilities as they occur within the network or tech stack on the network.

Web Scanning

Specifically scans webpages for potential threats or vulnerabilities.

Vulnerability Intelligence

Software that is able to label and store information about vulnerabilities to access for future use cases.

Threat Intelligence

Features for categories that leverage threat intelligence in network security

Network Analytics

Analyzes various data reports and logs (DNS, firewall, user data, security information etc.) to identify threats in a network.

Vulnerability Classification

Prioritizing vulnerabilities, to determine which vulnerabilities are most urgent and require a quicker resolution.

Automated Alerts and Reporting

Systems in place to automatically alert, report, or notify of issues that may need timely remediation.

Threat Analysis

Analyzing known factors such as behavior patterns, affected areas, and other specific features to more easily identify a threat.

Threat Intelligence Reporting

Generates reports that display information on threats (such as name, type, frequency of attack, area affected, etc.)

Automated Threat Identification

Leveraging multiple sources of information (such as threat intelligence databases) to automatically identify threats.

Threat Recognition

Detection and recognition of malicious software within a network that could pose a threat to sensitive information.

TrustRadius is a technology and business research firm based in Austin, Texas. The company is known as a review platform for verified B2B technology and software reviews through a proprietary algorithm and human verification.

TrustRadius

Home