DefectDojo is a vulnerability management system and application security orchestration tool. It serves as a centralized platform for importing, deduplicating, and tracking security findings from multiple scanners and tools to manage an organization's overall security posture.
The system distinguishes itself by aggregating findings from various security tools into a single report and normalizing that data to prioritize remediation. It provides specific workflows for vulnerability triage and deduplication to reduce noise and redundant manual work across the software development lifecycle.
The platform covers a broad capability surface including security pipeline automation, asset hierarchy modeling, and the generation of security metrics and reports. It integrates with external security tools, issue trackers, and directory services for identity management.
The application is built as a Django-based monolith and exposes its core functionality through a REST API.