{% trans "Connectors" %}
{% trans "Pull findings and assets from the APIs of 140+ scanners, cloud platforms and code hosts on a schedule. No export-and-upload scripts." %}
{% trans "Open-source: export each scan and upload it" %}
{% extends "base.html" %} {% load i18n %} {% load static %} {% block content %} {{ block.super }}
{% blocktrans trimmed %} Every open-source install is backed by the DefectDojo community. When your program needs more, DefectDojo Pro adds commercial support and capabilities built to run vulnerability management at scale. {% endblocktrans %}
{% trans "Ask questions, find answers and follow the project." %}
{% trans "DefectDojo Pro" %}
{% blocktrans trimmed %} Pro keeps everything you use today and adds connectors that bring findings in and push work out, prioritization by real-world exploitation, a no-code Triage Engine, AI assistance, compliance evidence and enterprise sign-on. {% endblocktrans %}
{% trans "Pull findings and assets from the APIs of 140+ scanners, cloud platforms and code hosts on a schedule. No export-and-upload scripts." %}
{% trans "Open-source: export each scan and upload it" %}
{% trans "EPSS, CISA KEV and exploit data on every CVE, refreshed daily, combined with reachability and business context into one priority score." %}
{% trans "Open-source: ordered by severity and CVSS" %}
{% trans "No-code rules that update findings, assign owners, accept risk, open tickets and notify people. Simulate a rule before it goes live." %}
{% trans "Open-source: routine triage by hand" %}
{% trans "Work the same issue once, whichever scanners report it, and group findings by the single fix that clears them across every asset." %}
{% trans "Open-source: same-tool deduplication" %}
{% trans "Turn findings into a short list of fixes with deadlines, and send work to ServiceNow, Azure DevOps, GitLab, Linear and more." %}
{% trans "Open-source: Jira and GitHub Issues" %}
{% trans "A Posture Score you can click through, custom dashboards, and branded report templates delivered as PDF on a schedule." %}
{% trans "Open-source: one dashboard, HTML reports" %}
{% trans "AI triage suggestions a person approves, fix pull requests, threat modeling, and an MCP server for the AI assistant you already use." %}
{% trans "Sensei features need a Sensei license" %}
{% trans "FedRAMP POA&Ms and OSCAL, CMMC scoring, PCI DSS evidence and EU CRA Article 14 reporting, generated from your live findings." %}
{% trans "Open-source: regulations recorded as labels" %}
{% trans "Single sign-on (SAML, OIDC, Entra ID, Okta), SCIM provisioning, multi-factor authentication, custom roles and audit logs." %}
{% trans "Open-source: local accounts" %}