{% extends "base.html" %} {% load i18n %} {% load static %} {% block content %} {{ block.super }}
{# ---------- Page header ---------- #}

{% trans "Get help with DefectDojo" %}

{% blocktrans trimmed %} Every open-source install is backed by the DefectDojo community. When your program needs more, DefectDojo Pro adds commercial support and capabilities built to run vulnerability management at scale. {% endblocktrans %}

{# ---------- Community support ---------- #}

{% trans "Community support" %} {% trans "Free" %}

{% trans "Ask questions, find answers and follow the project." %}

{# ---------- DefectDojo Pro ---------- #}

{% trans "DefectDojo Pro" %}

{% trans "The same DefectDojo, built to run your whole program" %}

{% blocktrans trimmed %} Pro keeps everything you use today and adds connectors that bring findings in and push work out, prioritization by real-world exploitation, a no-code Triage Engine, AI assistance, compliance evidence and enterprise sign-on. {% endblocktrans %}

140+
{% trans "upstream connectors" %}
9
{% trans "compliance frameworks" %}
24h
{% trans "EPSS and KEV refresh" %}
{% trans 'The DefectDojo Pro Command Center, showing finding sources, the Posture Score and outcomes' %}
{% trans "The Pro Command Center: where findings come from, what survives deduplication and triage, and what needs action." %}

{% trans "Connectors" %}

{% trans "Pull findings and assets from the APIs of 140+ scanners, cloud platforms and code hosts on a schedule. No export-and-upload scripts." %}

{% trans "Open-source: export each scan and upload it" %}

{% trans "Risk-based prioritization" %}

{% trans "EPSS, CISA KEV and exploit data on every CVE, refreshed daily, combined with reachability and business context into one priority score." %}

{% trans "Open-source: ordered by severity and CVSS" %}

{% trans "Triage Engine" %}

{% trans "No-code rules that update findings, assign owners, accept risk, open tickets and notify people. Simulate a rule before it goes live." %}

{% trans "Open-source: routine triage by hand" %}

{% trans "Cross-tool dedupe and Root Causes" %}

{% trans "Work the same issue once, whichever scanners report it, and group findings by the single fix that clears them across every asset." %}

{% trans "Open-source: same-tool deduplication" %}

{% trans "Remediation and ticketing" %}

{% trans "Turn findings into a short list of fixes with deadlines, and send work to ServiceNow, Azure DevOps, GitLab, Linear and more." %}

{% trans "Open-source: Jira and GitHub Issues" %}

{% trans "Dashboards and reporting" %}

{% trans "A Posture Score you can click through, custom dashboards, and branded report templates delivered as PDF on a schedule." %}

{% trans "Open-source: one dashboard, HTML reports" %}

{% trans "Sensei AI and MCP" %}

{% trans "AI triage suggestions a person approves, fix pull requests, threat modeling, and an MCP server for the AI assistant you already use." %}

{% trans "Sensei features need a Sensei license" %}

{% trans "Compliance evidence" %}

{% trans "FedRAMP POA&Ms and OSCAL, CMMC scoring, PCI DSS evidence and EU CRA Article 14 reporting, generated from your live findings." %}

{% trans "Open-source: regulations recorded as labels" %}

{% trans "Enterprise access" %}

{% trans "Single sign-on (SAML, OIDC, Entra ID, Okta), SCIM provisioning, multi-factor authentication, custom roles and audit logs." %}

{% trans "Open-source: local accounts" %}

{% endblock %}