This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP DefectDojo Project"
m (→Project Resources) (Tag: Visual edit) |
|||
| Line 37: | Line 37: | ||
[https://www.owasp.org/index.php/User:Grendel Jay Paz][mailto:jay.paz@owasp.org @] | [https://www.owasp.org/index.php/User:Grendel Jay Paz][mailto:jay.paz@owasp.org @] | ||
| + | |||
| + | [https://www.owasp.org/index.php/User:Aweaver Aaron Weaver][mailto:aaron.weaver@owasp.org @] | ||
== Related Projects == | == Related Projects == | ||
Revision as of 14:53, 4 June 2018
OWASP DefectDojo Tool ProjectAn open source vulnerability management tool that streamlines the testing process by offering templating, report generation, metrics, and baseline self-service tools. DefectDojo is a tracking tool written in Python / Django. DefectDojo was created in 2013 and open-sourced on March 13th, 2015. The project was started to make optimizing vulnerability tracking less painful. The top goal of DefectDojo is to reduce the amount of time security professionals spend logging vulnerabilities. DefectDojo accomplishes this by offering a templating system for vulnerabilities, imports for common vulnerability scanners, report generation, and metrics. DescriptionDefectDojo streamlines the testing process through several 'models' that an admin can manipulate with Python code. The core models include: 'engagements', 'tests' and 'findings'. DefectDojo has supplemental models that facilitate metrics, authentication, report generation, and tools. DefectDojo is written in Python 2.7 with Django 1.8. Testing or installing DefectDojo is easy. There is a live demo for interested parties to try Dojo here. If you decide to setup an instance of Dojo for your organization, we have developed a script that handles all dependencies, configures the database, and creates a super user. Complete installation instructions are found here. A complete walk-through can be found here. Documented example workflows can be found [1]. LicensingDefectDojo is licensed under the BSD Simplified License. Project ResourcesProject LeadersRelated ProjectsClassifications
News and Events
| |||||||
