DefectDojo supports over 250 integrations with security tools, making it one of the most flexible vulnerability aggregation platforms available. Scans from SAST, SCA, DAST, IaC, and other security scanners can be imported into DefectDojo and de-duplicated in bulk.
But importing and de-duplicating findings in DefectDojo isn’t all that can be done and customized.
In this training session, we'll walk through the following:
What parsers are and how DefectDojo uses them to normalize findings from security tools
The difference between manual UI imports, API-based imports, and Pro-only methods like Connectors, Universal Importer and Smart Upload
How to import your own findings without needing a parser via the Universal Parser
How to tune deduplication, data fidelity, and downstream reporting
